last executing test programs:

4m16.335574405s ago: executing program 3 (id=1290):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10)
close(r0)

4m16.316207785s ago: executing program 3 (id=1294):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0x4, 0x4)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x141}, 0x0)

4m16.297016866s ago: executing program 3 (id=1295):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
set_mempolicy(0x3, 0x0, 0xd)
bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000004}}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000080)=0x12, 0x4)
ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000040)={0x3b, 0x80000021, 0x14, 0x17, 0x7, 0x5, 0x3, 0x86, 0x5011d6c3c2744af9})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0xfffffd49)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x2010, r4, 0xecb78000)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/pm_wakeup_irq', 0x10000, 0x28)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10)
sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @remote}, 0x2, 0x4, 0x3, 0x2}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000440)="556656e70300ff8410466eae6b4ddd89beb53564a14c58834726ab22d4fb3df0afc9133fcc1a9d4f0e23d40c1dea52e383b92fea1856aacdc936ab961558da9735976eaa9656676d282b5d2f2448a75de5423163ae6c75f42b93c724b721bfa041abb7576b9a50ecadee2b4da8794638d006ffc69269117f05a56aa7d6", 0x7d}, {&(0x7f0000000640)="4ff424add6f84c8faa8b1a8800ff877d9ec9468286ea6a7a1f88c364232d52cf1745115861141735e2d15332cbb1fd0b7497c0eb52dca835ad559e8ac0a8fd50907cf64c2d601b184a0c867e915a41babaafcf8f44eec06d1a4513cb71ec24e3c363bfe94406633078f6cb389a6d3796ff73a0cc3432df75f1036a5615f13d588211f7f3bc19136609df7f3c4b5effaa2c5e7978610a4902cf0afdf101fd84381ed70beee3c11649c099203e1b4d640043a425b882555d72538e124fa0daf65e95097c3ec3d78e9ec69c7b7423ee84512c868654d95a1617b59dfbc68f690d0165235e008032b0a1e894e69d493642d54357c1356aa52c3d0d", 0xf9}], 0x2, &(0x7f0000001980)=[{0xc8, 0x89, 0x400, "5da2d815d01662f1f5ef428eef4dbcee4f2f5f0a99400025ac2bcc7cda9b569c2ea877d574932c346820e8f81addbcca181c60a2b6c9ab348d3a90a9093363832d0f586275783d7060e523319fd3170a6da4505a0fec14b434393d5115e9361c6cee558f573899864bc81c3767b7590accb8755208a19236a3275c24255a9ba932c117c92e24e8997f81c98d0a1ef927cf3cd8e7f56b1389cef75c0153f0fa8cc2d040e9c1c1ddb8f36e524e01285f50a751"}, {0xf8, 0x84, 0x9, "0c39633f96954326a2a49fbb5cb30b35a010b90c6bdab7826d8954d8df275d234b66146df3ccb69b87ff4cd9b5f7c794b7bb998727f29f56978d5007f43a60e26728a89aa033940d665f243cda28b95082743af349933946c0666dca5e1e1aa0be1495644c3572906d48ac761ad8be93a192bd163d70532f2de02d7c21160e1345c3560203e92260694932bdb493dffb50e0839e7c7d047c0f4c708aff0a703eb99fd39e870b6e97dc96d77e2f53c101b5391789ec833466e7b94db1bb2e99706a326956164150353e5b7e3a6b517dfbaee60298f9c23d0e165b8503b1ca8e4f0b9b783ae189ec"}], 0x1c0}, 0x5)
setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000900), 0x4)
mincore(&(0x7f0000555000/0x3000)=nil, 0x3000, &(0x7f00000032c0)=""/207)
r7 = fcntl$getown(r1, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
move_pages(r7, 0x7, &(0x7f0000000040)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000556000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000080)=[0x75d2, 0x1ff, 0xc, 0x3, 0x1000, 0x5, 0xffffffb4], &(0x7f00000001c0)=[0x0], 0x4)
unlinkat(0xffffffffffffffff, 0x0, 0x0)

4m15.417240389s ago: executing program 3 (id=1302):
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x80040e, &(0x7f0000000340)={[{@quota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@jqfmt_vfsv1}]}, 0x1, 0x44b, &(0x7f0000000400)="$eJzs3M1rHOUfAPDvzGbTX99+ibW+9EWNVjH4kjRp1R68KAoeFAQ91GNM0lK7baSJYEvRKFKPUvAuHgX/Ak/2IupJ8Kp3KRTJpdXTyuzOJJvNbl432ep+PjDt95l5huf57syTPDNPtwH0rKHsjyRiX0T8FhED9eLyCkP1v+4sXJ38a+HqZBLV6lt/JrV6txeuThZVi/P25oXhNCL9LIkjLdqdvXzl/ESlMn0pL4/OXXh/dPbylWfPXZg4O312+uL4qVMnT4y98Pz4cx3JM+vT7cMfzRw99No719+YPH393Z++TYr8m/LokKHVDj5RrXa4ue7a3xAnfV3sCBtSiojscpVr438gSrF08Qbi1U+72jlgW1Wr1ere9ofnq8B/WBLd7gHQHcUv+uz5t9h2aOpxV7j1Uv0BKMv7Tr7Vj/RFmtcpNz3fdtJQRJye//urbIvteQ8BALDM99n855lW87807m+o9/98bWgwIu6JiAMRcW9EHIyI+yJqdR+IiAfX12y5CJoXSVbOf9Kbm05uHbL534v52tby+V8x+4vBUl7aX8u/nJw5V5k+nn8mw1HelZXHVmnjxiu/ftHuWOP8L9uy9ou5YN6Pm327lp8zNTE3sZWcG936JOJwX6v8k8WVgCQiDkXE4U22ce6pb462O7Z2/qvowDpT9euIJ+vXfz6a8i8kq69Pjv4vKtPHR4u7YqWff7n2Zrv2t5R/B2TXf0/L+38x/8Gkcb12duNtXPv987bPNJu9//uTt2txf77vw4m5uUtjEf3J6/VON+4fXzq3KBf1s/yHj7Ue/wdi6ZM4EhHZTfxQRDwcEY/kfX80Ih6LiGOr5P/jy4+/t/n8t1eW/9SGrv9S0B/Ne+pBcWKxp3T+h++WNTq4FK7v+p+sRcP5nvX8/GvVr1bBFj46AAAA+NdII2JfJOnIYpymIyP1fy9/MPaklZnZuafPzHxwcar+HYHBKKfFm66BhvehY/ljfVEebyqfyN8bf1naXSuPTM5UprqdPPS4vW3Gf+aPUrd7B2y7tdfRbuxIP4Cd5/ua0LuMf+hdxj/0rhbjf3c3+gHsvFa//z9uVznZ3r4AO6tp/Fv2gx7i+R96l/EPvcv4h540uzvW/pK8QLAiiPSu6Iagc0HxXx7V9nT5BxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECH/BMAAP//RJ/gtA==")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000340)=0x1e)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r2}, 0x10)
epoll_create1(0x80000)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xba8, 0x299}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x8b2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_clone(0x62008011, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x8, 0x3, 0x508, 0x0, 0x11, 0x148, 0x0, 0x0, 0x470, 0x2a8, 0x2a8, 0x470, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3, 0x0, 0x88000000, 0x4, 0x90007, 0x20}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x0, 0x3, 0x0, 0x1, 0x1], 0x5, 0x5}, {0x2, [0x2, 0x0, 0x1, 0x4, 0x4, 0x2]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x568)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0)
ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40603d07, &(0x7f0000000040))

4m15.114393183s ago: executing program 3 (id=1307):
openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00f0ff00000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1)
sendmsg$NLBL_MGMT_C_VERSION(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r2=>0x0})
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540))
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4880)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4cf0035d", @ANYRES16, @ANYBLOB="00042bbd7000ffdbdf25140000000c000600010000000100000008000300", @ANYRES32=r2, @ANYBLOB="08001c00", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="0c0006000400000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004010)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400})

4m14.795875939s ago: executing program 3 (id=1308):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x2000759, &(0x7f0000000800)={[{@noload}, {@noblock_validity}, {@mb_optimize_scan}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xf3e}}, {@abort, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x10}}, {@journal_dev={'journal_dev', 0x3d, 0xeff}}, {@nombcache}, {@lazytime}, {@resuid}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@norecovery}, {@data_writeback}, {@quota}], [{@audit}, {@uid_lt}], 0x2c}, 0x6, 0x50c, &(0x7f00000002c0)="$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") (fail_nth: 24)

4m14.791920038s ago: executing program 32 (id=1308):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x2000759, &(0x7f0000000800)={[{@noload}, {@noblock_validity}, {@mb_optimize_scan}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xf3e}}, {@abort, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x10}}, {@journal_dev={'journal_dev', 0x3d, 0xeff}}, {@nombcache}, {@lazytime}, {@resuid}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@norecovery}, {@data_writeback}, {@quota}], [{@audit}, {@uid_lt}], 0x2c}, 0x6, 0x50c, &(0x7f00000002c0)="$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") (fail_nth: 24)

3m58.99341662s ago: executing program 5 (id=1566):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
getrlimit(0xb, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
unshare(0x40020000)

3m58.146598463s ago: executing program 5 (id=1582):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r3 = fcntl$getown(r2, 0x9)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r2, 0xe66, 0x9, 0x1})
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000001e40)='kmem_cache_free\x00', r7, 0x0, 0x2}, 0x18)
umount2(&(0x7f0000000040)='./file0/file0\x00', 0x8)
unshare(0x42060280)

3m57.158043768s ago: executing program 5 (id=1595):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', <r1=>0x0})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x60, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0xba01}, 0xfe0f)

3m57.134601638s ago: executing program 5 (id=1596):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = gettid()
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
ptrace$ARCH_GET_UNTAG_MASK(0x1e, r3, &(0x7f0000000140), 0x4001)
sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000020a2e3686d000100", @ANYBLOB, @ANYRES32=r1, @ANYRES16=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32=r1, @ANYRESHEX=r2, @ANYRES32, @ANYRES32=0xee01, @ANYRES16=r0, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881)
perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fd, 0xa2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdb}, 0x0, 0x0, 0x6, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, r2, 0xffefffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x30, r5, 0x0)
ioctl$SG_SET_TIMEOUT(r5, 0x2201, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x8001000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd0, 0x11, 0x148, 0xd0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffff00, 0xffffffff, 'geneve0\x00', 'sit0\x00', {}, {0xff}, 0x73, 0x2, 0x14}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x3, 0x3, 0x5]}, {0xffffffffffffffff, [0x11]}}}}, {{@ip={@multicast2, @multicast2, 0xffffff00, 0xffffffff, 'lo\x00', 'hsr0\x00', {0xff}, {0x7f}, 0x88, 0x2, 0x2}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0xb201}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r7)
syz_clone3(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x24f, &(0x7f0000000840)="$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")
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r8, 0x0, 0x0)
syz_clone(0x820080, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
getpgid(0x0)

3m56.739813524s ago: executing program 5 (id=1600):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES64], 0x18}}, 0x200040c0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000ff0f000000000000", @ANYRES32, @ANYBLOB="010400"/20, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r0], 0x50)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000008, 0x20010, 0xffffffffffffffff, 0x8000000)
r3 = syz_io_uring_setup(0x1b68, &(0x7f0000000380)={0x0, 0x1040, 0x10, 0x1003, 0x100}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000400)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r6, 0x0, &(0x7f0000001880)="1ee693a642", 0x5, 0x4004, 0x1})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r8 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0x2, 0x3}, 0x6)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18)
write$binfmt_misc(r8, &(0x7f00000008c0)="98a7d6d5fdf6b0a24a63ba9934cbf58e98eb7c344702126bcb5e4d6c8f9dba0dab5c31951a30ed9fe4dc61ed19b574551ac9163d65feeab42c592db9911e23ef4bb82b0f5207b5181368a0ac25f6a358049641d606263bf620f3e4dbc515bf2c0abcfb80e11a00bb4dbce3a037f748e2fc771e8216ebe54d7ea6d41e6a63b04926a554f8f344e3a3c47da745d7a925c67484413bc4a651", 0x97)
fallocate(r8, 0x0, 0x0, 0x1001f0)
fallocate(r9, 0x3, 0xffffffffffffffff, 0x10000)
fsmount(r8, 0x0, 0x4)
syz_io_uring_submit(r2, r5, &(0x7f00000005c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000540)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x2000000}, 0x0, 0x0, 0x0, {0x0, r7}})
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYRES16, @ANYBLOB="5a5381d836a1c623332d853a36728fb42cf3bf401f8f056cc4b1e645120062877bc0f4f646ac0fe8cfa272871cd81db2a8ecf2b6beba0ac9decba7007a32f13b284534447a90758e104951d1a8d615", @ANYBLOB="0000008000"/20, @ANYRES32=r3, @ANYRES8=r1, @ANYBLOB="04000000050000000100000000000000000000000000000000000000a4f2f7bb8e0be893bc1eb690ce8c64240e5fe3b3e9cce5a1c7099b25237005078c5adf2cb8fd145d3c0bff5458ab"], 0x50)
r12 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r12, 0x114, 0xa, 0x0, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES64=r6, @ANYRES16=0x0, @ANYRES8=r11, @ANYBLOB="f752d4270266753205ee3c43668a094b2d929d6fd935c8e719f294956fa37998656a8971c999333b8a52cd60790182b3da042ed57bd0c64048ff4ec6c3b0887eb38ffbedf936a43b4435bf16732e52273b9af8b0887ada0c5006209c743a2b5094823cab9260c382a5ef6250cff9535ef98f10d859b025aab6e8faf45929c6ffcb3749d21fffa66d36971fe31e1681db86ae59528755"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r13}, 0x10)
socket$netlink(0x10, 0x3, 0x9)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
mmap(&(0x7f0000604000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)

3m56.398791399s ago: executing program 5 (id=1602):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000c8497348d6b99c39d9a1cf00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sched_rr_get_interval(0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
pipe(&(0x7f0000000100))
connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11)
recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0x6c5621a684f1998c}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x15, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xfffffffffffffdac}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)

3m56.35420833s ago: executing program 33 (id=1602):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000c8497348d6b99c39d9a1cf00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sched_rr_get_interval(0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
pipe(&(0x7f0000000100))
connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11)
recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0x6c5621a684f1998c}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x15, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xfffffffffffffdac}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)

3m12.294516023s ago: executing program 0 (id=2394):
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000"], 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0xf, 0xc340)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x0, 0x1, 0xa5}, &(0x7f0000000380), &(0x7f00000003c0))

3m12.111844086s ago: executing program 0 (id=2396):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r2, 0x0, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/4153], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x5, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

3m12.031911617s ago: executing program 0 (id=2398):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10)
close(r0)

3m11.782394171s ago: executing program 0 (id=2404):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0xffffff5d)
r1 = socket$inet(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f80)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5802, 0x294, 0x168, 0x294, 0x238, 0x325, 0x378, 0x238, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110, 0x52020000, {}, [@inet=@rpfilter={{}, {0x4}}, @common=@frag={{}, {[0xb, 0x3], 0x0, 0x2c}}]}, @unspec=@CT2={0x0, 'CT\x00', 0x2, {0xe, 0x0, 0x5, 0x6, 'syz1\x00', 'syz0\x00', {0x5410}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x6, 0x1}, {0x1, 0x6, 0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x173)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x44880, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setregs(0xf, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r5, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000740)={0x0})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendto$inet(r1, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf", 0x95, 0x40040, 0x0, 0x0)
io_setup(0x7d, &(0x7f0000000600))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)

3m10.672872778s ago: executing program 0 (id=2423):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
set_mempolicy(0x3, 0x0, 0xd)
bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000004}}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000080)=0x12, 0x4)
ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000040)={0x3b, 0x80000021, 0x14, 0x17, 0x7, 0x5, 0x3, 0x86, 0x5011d6c3c2744af9})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0xfffffd49)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x2010, r3, 0xecb78000)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/pm_wakeup_irq', 0x10000, 0x28)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @remote}, 0x2, 0x4, 0x3, 0x2}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000440)="556656e70300ff8410466eae6b4ddd89beb53564a14c58834726ab22d4fb3df0afc9133fcc1a9d4f0e23d40c1dea52e383b92fea1856aacdc936ab961558da9735976eaa9656676d282b5d2f2448a75de5423163ae6c75f42b93c724b721bfa041abb7576b9a50ecadee2b4da8794638d006ffc69269117f05a56aa7d6", 0x7d}, {&(0x7f0000000640)="4ff424add6f84c8faa8b1a8800ff877d9ec9468286ea6a7a1f88c364232d52cf1745115861141735e2d15332cbb1fd0b7497c0eb52dca835ad559e8ac0a8fd50907cf64c2d601b184a0c867e915a41babaafcf8f44eec06d1a4513cb71ec24e3c363bfe94406633078f6cb389a6d3796ff73a0cc3432df75f1036a5615f13d588211f7f3bc19136609df7f3c4b5effaa2c5e7978610a4902cf0afdf101fd84381ed70beee3c11649c099203e1b4d640043a425b882555d72538e124fa0daf65e95097c3ec3d78e9ec69c7b7423ee84512c868654d95a1617b59dfbc68f690d0165235e008032b0a1e894e69d493642d54357c1356aa52c3d0d", 0xf9}], 0x2, &(0x7f0000001980)=[{0xc8, 0x89, 0x400, "5da2d815d01662f1f5ef428eef4dbcee4f2f5f0a99400025ac2bcc7cda9b569c2ea877d574932c346820e8f81addbcca181c60a2b6c9ab348d3a90a9093363832d0f586275783d7060e523319fd3170a6da4505a0fec14b434393d5115e9361c6cee558f573899864bc81c3767b7590accb8755208a19236a3275c24255a9ba932c117c92e24e8997f81c98d0a1ef927cf3cd8e7f56b1389cef75c0153f0fa8cc2d040e9c1c1ddb8f36e524e01285f50a751"}, {0xf8, 0x84, 0x9, "0c39633f96954326a2a49fbb5cb30b35a010b90c6bdab7826d8954d8df275d234b66146df3ccb69b87ff4cd9b5f7c794b7bb998727f29f56978d5007f43a60e26728a89aa033940d665f243cda28b95082743af349933946c0666dca5e1e1aa0be1495644c3572906d48ac761ad8be93a192bd163d70532f2de02d7c21160e1345c3560203e92260694932bdb493dffb50e0839e7c7d047c0f4c708aff0a703eb99fd39e870b6e97dc96d77e2f53c101b5391789ec833466e7b94db1bb2e99706a326956164150353e5b7e3a6b517dfbaee60298f9c23d0e165b8503b1ca8e4f0b9b783ae189ec"}], 0x1c0}, 0x5)
setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000900), 0x4)
mincore(&(0x7f0000555000/0x3000)=nil, 0x3000, &(0x7f00000032c0)=""/207)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
move_pages(0x0, 0x7, &(0x7f0000000040)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000556000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000080)=[0x75d2, 0x1ff, 0xc, 0x3, 0x1000, 0x5, 0xffffffb4], &(0x7f00000001c0)=[0x0], 0x4)
unlinkat(0xffffffffffffffff, 0x0, 0x0)

3m10.358973803s ago: executing program 0 (id=2428):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)='%pS    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "9f2b"}, @TCA_NETEM_LOSS={0xfffffffffffffe4d}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)

3m10.325793833s ago: executing program 34 (id=2428):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)='%pS    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "9f2b"}, @TCA_NETEM_LOSS={0xfffffffffffffe4d}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)

2m23.843575764s ago: executing program 4 (id=3003):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@mcast1, @mcast2, @loopback={0x1000000}, 0x2, 0x0, 0x0, 0x0, 0x7, 0xca0167, r2})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', r2, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone3(&(0x7f00000018c0)={0x80, &(0x7f0000001680), &(0x7f00000016c0), &(0x7f0000001700), {0x27}, &(0x7f0000001740)=""/127, 0x7f, &(0x7f00000017c0)=""/182, &(0x7f0000001880)=[0xffffffffffffffff, 0x0], 0x2, {r3}}, 0x58)
inotify_init1(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX=r4], 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r5 = socket$inet(0x2, 0x3, 0x8)
setsockopt$inet_int(r5, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10)
dup(0xffffffffffffffff)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x33, "a4c3ea051fc8f66eedf1c6676b4e9ac4711a3ee41b102a78284f8818400000fe", "c493c69907ac61ee57f3ff6656218f8c880cab0b7f5f977f29b54144914986b5", "7795433781033bb967429b7c68c2566066943f3a566d7fd05557583a535a3b9e", "cba936683f411a1265d9ffb369dbe16de72fd8ee91c60f531196c136add25f43", "3fda464b4ffcb83f5c89e20fe8814b4e26bb81519905d65c5a0ae43be09d9f7b", "9900255a099270427859ce54", 0x43dd5e67, 0x9, 0x4, 0x5, 0x9}})

2m23.43079283s ago: executing program 4 (id=3008):
r0 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x41}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0)

2m23.41151724s ago: executing program 4 (id=3009):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @multicast1}}}}], 0x28}, 0x0)
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0xbf, 0x28}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', <r3=>0x0})
r4 = memfd_secret(0x80000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x10, &(0x7f0000000180)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @ldst={0x3, 0x1, 0x2, 0xdd0b3fffb2f0300b, 0x2, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}], &(0x7f0000000200)='GPL\x00', 0x9, 0xbb, &(0x7f0000000240)=""/187, 0x40f00, 0x1, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000340)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0xb, 0x7, 0x5}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x2, 0x5, 0x1, 0xa}], 0x10, 0x7, @void, @value}, 0x94)

2m23.351712611s ago: executing program 4 (id=3010):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000024000040040003000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x13, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000007000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000001f2c0000000000000018100000", @ANYRES32=<r4=>0xffffffffffffffff, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r3, @ANYBLOB="8124ce5ba3f7b946a8ae5dc1f2ca136ba76dc37b4a94262adca4a21ff1ad8b02584b48e766cae7a13c", @ANYBLOB="73372f3844c352005f62e4447c6ea9c4665a9cbd469cd6523ecd8147384ef20015c305005e3b58ad88511ba1a7320f7792159ecc518957ede72b032c901c83466a2505c7e35414bf5049fadba190754c7a13c45355b58f109f49d50d8e8f1fa8cd61445a9e0be348dc9211d4511f7b5542", @ANYRES32=r4, @ANYRES32=r2, @ANYRES8=r1], 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7, 0x0, 0x7}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)
r8 = getpid()
r9 = syz_pidfd_open(r8, 0x0)
setns(r9, 0x24020000)
syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendto$inet6(r5, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r10, &(0x7f0000000080), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r10, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

2m23.220079433s ago: executing program 4 (id=3013):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000280)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x0, 0x505, &(0x7f0000000a40)="$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")
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r9}, 0x10)
setgid(0x0)

2m22.003826021s ago: executing program 4 (id=3026):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r1 = socket$kcm(0x2, 0xa, 0x2) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
syz_clone(0x8005400, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) (async)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
r2 = socket(0x10, 0x803, 0x0)
mmap(&(0x7f000034a000/0x2000)=nil, 0x2000, 0x1000001, 0x110, r2, 0xaac0b000)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3c, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) (async, rerun: 64)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) (async, rerun: 64)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async, rerun: 32)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000001480)=""/4096, 0x1000, <r4=>0x0, &(0x7f0000000280)=""/206, 0xce}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r5}, 0x18) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (rerun: 32)
write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c11fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21"], 0xd2)

2m21.743664066s ago: executing program 35 (id=3026):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r1 = socket$kcm(0x2, 0xa, 0x2) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
syz_clone(0x8005400, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) (async)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
r2 = socket(0x10, 0x803, 0x0)
mmap(&(0x7f000034a000/0x2000)=nil, 0x2000, 0x1000001, 0x110, r2, 0xaac0b000)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3c, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) (async, rerun: 64)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) (async, rerun: 64)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async, rerun: 32)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000001480)=""/4096, 0x1000, <r4=>0x0, &(0x7f0000000280)=""/206, 0xce}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r5}, 0x18) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (rerun: 32)
write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c11fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21"], 0xd2)

2m4.423545271s ago: executing program 1 (id=3259):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xfffffffd, 0x80, 0x1, 0x357}, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}})
io_uring_enter(r2, 0x47bc, 0x2, 0x0, 0x0, 0x0)

2m4.384071041s ago: executing program 1 (id=3261):
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"], 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0xf, 0xc340)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x0, 0x1, 0xa5}, &(0x7f0000000380), &(0x7f00000003c0))

2m4.136819495s ago: executing program 1 (id=3263):
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x800)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
socket$inet6(0xa, 0x3, 0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
socket$inet6_sctp(0xa, 0x5, 0x84)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000240), &(0x7f00000003c0)=r10}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r9, r6, 0x25, 0x2, @val=@tcx={@void, @value=r9}}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000740)=ANY=[], 0x0)

2m3.901269128s ago: executing program 1 (id=3270):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8205, &(0x7f0000001340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x15}}, {@stripe}, {@grpid}, {@errors_remount}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x13}}]}, 0x1, 0x60a, &(0x7f0000001c40)="$eJzs3c9rHNcdAPDvzEqqZKuVXYqpTUsFPdhQrB+uqduebF/qg6GG+lBCDhaW5AivbGHJEDuGyJBDAgmEkGsIvuQfyD2YXHMLgSS3nANOCA45JMEbZnbHXla78lrR/pDn84FZvXkzu+999+lp3uzo7QRQWtPZQxpxOCIuJRFTTdsmo75xurHfw+/uXM6WJGq1/32bRNLIK/Z/1Pi5P3tIIsYj4tOzEb+vbC13/dbtqwvVWt2rEbMbq2uz67duH19ZXbiydGXp2vyJf548Nfev+ZPzuxJnEde58//901uvvfSP5c+qx5M4HRdHX1mMljh2y3RMx6NGiM35IxFxKku0eV/2miKEZMD1YGcqjd/H0Yg4FFNRydfqpmLlzYFWDuipWiWiBpRUov9DSRXjgOLcvhfnwcPswZn6CdDW+Efqn43EeH5utO9h0nRmVD/fPbAL5Wdl/HznyHvZEh0+hxjZhXI62bwbEX9sF3+S1+1A/ilOFn8aadPzsvRcRIw13ot0h+VPt6z3+/fvWeJvbocs3tONn1n+2R2WP+j4ASin+2caB/LNbO3J8S8bGRbjn2gz/plsc+zaiUEf/zqP/4rj/Xj+GXnaMg7LxjwX2r/kaGvGV2+ce6dT+c3jv2zJyi/Ggv3w4G7EkZb4X88Hc8nj9k/atH+2y6Uuy/jP59+c67Rt0PHX7kUcbXv+8+SKVpaa3VhdK/Jark/OLq9Ul+bqj23L+OiTFz/oVP6g48/aPzrEv137Z3lrXZbx4YV7q522TT41/vTrseRinhpr5Ly8sLFxYz5iLDnf2KUp/8T2dSn2KV4ji//YX9v3/23izxt6s8v41/5/9WE9tfUqadftv+WvSu5Rrcs6dJLFv7jD9n+7yzJ+eOHmn1uyJorEdvFPbH2ppNv3HAAAAAAAAMooza/BJunM43SazszU5/D+Ifal1evrG39bvn7z2mLEsfz/IUfT4kr3VH09ydbnG/8PW6yfaFn/e0QcjIh3KxP5+szl69XFQQcPAAAAAAAAAAAAAAAAAAAAQ2J/Y/5/cZ/q7yv1+f9d2TjU49oBPdfLG8wBw03/h/LK+/9O7+AK7GmO/1Be+j+Ul/4P5aX/Q3np/1Be+j+Ul/4P5aX/AwAAAMBz6eBf7n+ZRMTmvyfyJTPW2DY60JoBvfbsfXy6J/UA+q/S16cBw+TxpX/T/6F0uhr//9j4csDeVwcYgKRdZj44qG3f+e+3fSYAAAAAAAAAAAAA0ANHD5v/D2WVxseDrgIwIL9iIr/vAIA9zlf/Q3k5xweeNot/vNMG8/8BAAAAAAAAAAAAoG8m8yVJZxq3AJ2MNJ2ZifhtRByI0WR5pbo0FxG/i4gvKqO/ydbnB11pAAAAAAAAAAAAAAAAAAAAeM6s37p9daFaXbrRnPhpS87znSjugjos9WlORNL/QiciYhhi701ipCknidjMWn4oKnZjPYaiGmlejQH/YQIAAAAAAAAAAAAAAAAAgBJqmnvc3pH3+1wjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOi/J/f/33kiecrrDDpGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBv+iUAAP//q+Q5KA==")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x752887e04b6038ce, &(0x7f00000006c0)=ANY=[@ANYRES32=r0, @ANYRESOCT=0x0, @ANYRES8], 0x0, 0x68f, &(0x7f0000000c00)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001440)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e841cca555077e3a159110193dd2ff1fa7c3205bfedbe9d8f3bd23cd78a07e32fe0231368b2264f9c504b2f1f65515b2e1a38d522be18bd10a48b043ccc42646d25dfd73d06d7535f7866925d86751dfced1fd8accae669e173a659c1cfd6587d47578f4c35235138d5521f9453559c35da860e8efbcbfb42c30d294a55e1c46680bee88956f2b3599f455c7a3a49a01010000009f2f0517e4ca0e1803a20000000013d4e21b3336f1ae0796f23526ec0fd97f7325eac34c4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b09789d99b3d0524f39d5ae913b2d22eb2c09244ba5dbe9180950f76f7049db5cb19d7962fed44e00f39ed8c13a11fa798de504e2865cd81f2b77fdd76c677f812d249c8130b018d4300000020000000db3947c85c3a9027ce9e856fa8b7fb05000000000000593d60abc9b3e67d127e56f3d3759dcfeb820634fd4d419efaefc74305b2bea2000600000051fcf5d62205561b6efaad206335a309f7b9e01446a6285f4665a7fe3cda2349f8bf400100000000000000f40f420ee83f2d9babe7b922401639ce3c4ff0850a8e078374909413f3fbd3ced3285252dc81a46ef7ce29484dc6b6adfd7a4db730fc594609654d97836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f3914909187b6b0776952be71b0417d33d3ab25493418ba0fbacf768e07c1a939d31f606085b9e3efc93b0f58d5ec37494d9d10d76e603129e9a726579ac7d672cacd581b7ca77b3610b74039fffd42051d4b7443e5b49c000000000000007d6173050027791c9c1e04ad3711a66da2254a6f911b1469c62a6e1e3f9c1715c009a58e6eadac8f61b45853673df72dc813f7454ae22d79ac48034282f03040889500000000179dcf66d93907cedd49e0c5752f755849953957143a0335d2f62acbf18b251ce63b29fe177745448ccc925770fac12cf9e291200df6bb669d5a57dd74df817ef2f8698f710c359afe73947afebdf5536e4db8b0231d0cbc798766ec60586f14b44775bc9d250e4515cb83275d3b495fa90000e69a68b47ac4595463e1442d88e0606a060000cc914fae896ab129ccdf8792a8435972c8391d132a2fcbd40e865d62cc7c4200000000000000000000000000000800002a77fbbccfdb1ab3d8434905f09726b8145ea99c7640faab578dc98a6134df0a10a54ce7e7ddbb709a27d977d1f91ab9ee940700009594c9a50961b7fcc56d82584dc8254df7c411fa61353a6897c4f3b9f152fdf6f2ab47adb29aefecce96c94f360e129c9f2af569c794b68b2ead404bcdd4aa9cb6a128e1ad45fd4030e1e69adf4986b7860f3122d59c079f0f9a1732f691590f45512aec4ed2413f66cac7dd022301741c576dea82005b166d6c3b9ed0c297ac197a92188a618745e78dca0b3c62f1601243089d9c687563382b0b88a7d80fd7bf7fae8a690f52db1464d29b1b926414cd35705c89662c585e32c881d917b74f027674dbc017499ba15a2e2900000000000000000000000000007b593ecbdd162fee9f239a3c615b3e9a3fb0af254bdd247a5a5abdbc0123c950eec0f1800b295be71418dd65de15e11beef9630499c70fce74135a7c7c8e818b79b85ff65d59d89492d7a663d3f25651e252ab49d358eac853ffe182ee37a5db085a072647719cb8604ba2e0b80af3f1867bd8fb6afca671437e0a5a9d5a088436739262d894986882ec0fb419a377ef47f4920a5de6d8de0d3090b4cb6b773e825442d351f980eed0d997a4d98a5121e941b145e2186546c646128a3e69f52fcad83a026def90b9eb55f4a0a2251bbae428c6c017b5a47f1580831a7ce232857e6aa9e777e99da1a3ad03fdc93fa7ed96228deac5e3bce983971041297a6ba18783a2edc7e3901cc891035872c61e7ea375b0902be0c5cc7fdef968ba1ca17ce5e11f2f384cd28c1194f56d3cf074e8ba4e60e84dc2f352c3cd170581aee0c93ca8ceff84cda40325d340759e79e5c4bcec227e37f7ec2193c78877fb319ec1f2d4dcf1d46a15cde1d6cecce6ecdb0c0a3413394d51341a7b3606ad8c29b6dbf6be3265b528c3208de35161bfe19678df43a45b314e5a0f8754cfaf4f9d3fdf9c8f7b7c296bf2e632d25ba8ee6369b362a8e4c9dff176d482d32249c93680a04f6464f184acfd0376662fee9e1031e569248db9bc724cdd97976a4d7c5c5172d1383fa1e442f68a14b747a9f2597bf115dd0111fe8ba3584a43176f33bd39a408f8648b19839bba9cc47624ea19e46dbbdf0faf591bcdc8613828a0c5a40c04ae34bbf4a0e27828b0c7cb9d7a7455db030425a4bd69cf6dcb4b1d066f8ef4ea1c710e05819df82d5cc94ace6b41c2de37a2eaf24f24b3d9a7dd4d197d51407be3e90000000000000000dbc0b0d6e11ccb71437ebea7ad01d5b93a7a0561e4a1b3fa1aa9c75f3aaec4ace1b6201a3e007b657be62df59133b4d8f0f145d9fc954cc7792077268bf0977e2a699722ce3dbb97248b8a8a771dd0f7d9c97e6587524a44fd6d49330ccbc39ca277b84f7f0a39759ef0b42388bd69fe341a925e8cdc5d7b2d6ddb7331a081bd0672bf4d02255de095a179e51bf5492d4e89c3cbad59db725c0dd7e35cbd9887175286a37d7621a361eb830cc5b842b11b5d040ccceb254d6a0c9c43718d0816bb2465928e236101b8cd46b5ef9cb930378a9249cbb41b92fe3caef70845cde9bb78d71c512153d2f1d765b56d2e5ef3e3d34975787646630051074c9706747fda873ccfdb394fc269c8cfadc0a52c3402f3920001ddd312969ecc08a99f5a3be58de34149af8360a7db3f301e656c5485d5de03be99b04e3593e8e18d7b635ca24a915c82122ac7a5bf6d011ee91573d66fc9522a76fa00211d62dc123fd51d1cb2ce1d4f3a62f99e2d93b2d34324a962a3762b6e8d7d3a7f73af6eb264b44822d8847442c3df4771df9a5d79443174b191878fe586facc18035f09fd70a137809ce970e31c4e6a8e48ce2fc30316087caaa2ed0bda52e969fda35236ac9aedb241a114a8cf1c49b8bd3f73"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f00000005c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r1)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="b8000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000fedbdf250800000014000300fc0100000000000000000000000000010800040000000000140002000000000000000000000000000000000114000300fe8000000000000000000000000000aa140002002001000000000000000000000000000208000400ac1414aa2d00070073797374656d5f753a6f626a65636e5f723a6465766963656b69745f7661725f6c69625f743a73300000000014000200fc000000000000000000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x1ad38c0ac05743c7)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@deltaction={0x18, 0x18, 0x210, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0xc014)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000040)=0x7, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x12, r5, 0x0)
getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0x0, &(0x7f0000000300))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x24, 0x0, 0xffffffffffffffff, @void, @value}, 0x14)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x19, 0x0, &(0x7f0000000200))
ptrace(0x10, r6)
ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")

2m3.631793942s ago: executing program 1 (id=3272):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r0, 0x1)
recvmmsg(r0, &(0x7f0000003500)=[{{&(0x7f00000001c0)=@generic, 0x80, &(0x7f0000000240)=[{&(0x7f0000000340)=""/205, 0xcd}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x2, &(0x7f00000014c0)=""/170, 0xaa}}, {{&(0x7f0000001580)=@alg, 0x80, &(0x7f0000000440)=[{&(0x7f0000001600)=""/176, 0xb0}], 0x1, &(0x7f00000016c0)=""/78, 0x4e}}, {{&(0x7f0000001740)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/104, 0x68}, {&(0x7f0000001840)=""/201, 0xc9}, {&(0x7f0000001940)}], 0x3, &(0x7f00000019c0)=""/40, 0x28}, 0x7}, {{&(0x7f0000001a00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001a80)=""/253, 0xfd}, {&(0x7f0000001b80)=""/218, 0xda}, {&(0x7f0000001c80)=""/12, 0xc}, {&(0x7f0000001cc0)=""/182, 0xb6}, {&(0x7f0000001d80)=""/209, 0xd1}, {&(0x7f0000001e80)=""/247, 0xf7}, {&(0x7f0000001f80)=""/147, 0x93}, {&(0x7f0000002040)=""/90, 0x5a}], 0x8, &(0x7f0000002140)}, 0x7ff}, {{&(0x7f0000002180)=@alg, 0x80, &(0x7f0000003300)=[{&(0x7f0000002200)=""/20, 0x14}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000003240)=""/143, 0x8f}], 0x3, &(0x7f0000003340)=""/78, 0x4e}, 0x4}, {{&(0x7f00000033c0), 0x80, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/20, 0x14}, {&(0x7f0000003480)=""/8, 0x8}], 0x2}, 0xd33e}], 0x6, 0x40, 0x0)
ppoll(&(0x7f0000000480)=[{r0, 0x281}, {r0, 0x205}], 0x2, 0x0, 0x0, 0x0)

2m3.299878028s ago: executing program 1 (id=3276):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x10)

2m3.294175448s ago: executing program 36 (id=3276):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x10)

3.215735221s ago: executing program 7 (id=4748):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='mm_page_alloc\x00', r0}, 0x18)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r1, 0x0)

3.197335511s ago: executing program 8 (id=4749):
r0 = syz_io_uring_setup(0x250b, &(0x7f0000000100)={0x0, 0x10645c, 0x800, 0x400040, 0x240}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000200)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x5d, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x48080})
syz_io_uring_setup(0x3c00, &(0x7f00000005c0)={0x0, 0x8ecf, 0x1000, 0x1, 0x2ef}, 0x0, 0x0)
io_uring_enter(r0, 0x47f6, 0x0, 0x1000000000000000, 0x0, 0x0)

3.131822382s ago: executing program 7 (id=4750):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000000300007ee100c731f01e77e0c1f347b5e16bf64f"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20)
open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0))
pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r4], 0xac}, 0x1, 0x0, 0x0, 0x4090}, 0x0)

2.965801695s ago: executing program 7 (id=4752):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8)
r1 = io_uring_setup(0x51d8, &(0x7f0000000100)={0x0, 0x9f09, 0x10000, 0x2, 0x3c0})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000000000b7c300000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
setrlimit(0x40000000000008, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000002700)={0x3, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000005c0)=""/278, 0x116}, {&(0x7f00000015c0)=""/4091, 0xffb}, {&(0x7f0000002a00)=""/88, 0x58}], 0x0}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x48)
r4 = inotify_init()
r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x82000714)
inotify_rm_watch(r4, r5)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000000280)={0x9}, 0x0)
r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10000)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x4ea}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80011}, 0x404c8c4)
setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @remote}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8)
sendto$inet(r7, 0x0, 0x0, 0x24000087, &(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10)
r9 = fsmount(r6, 0x0, 0x20)
symlinkat(&(0x7f0000000000)='.\x00', r9, &(0x7f0000000140)='./file0\x00')

2.876650076s ago: executing program 6 (id=4754):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0)
ioctl$RTC_UIE_ON(r3, 0x7003)
ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000400)={0x1, 0x1, {0x0, 0x1a, 0x11, 0xf, 0x0, 0x4f60, 0x2, 0x5e}})
close_range(r2, 0xffffffffffffffff, 0x0)

2.791060648s ago: executing program 6 (id=4756):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00'}, 0x18)
rename(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x25dfd9ff}, 0x14}}, 0x24000000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000efcf2d975b3b"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382)
r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5', 0x2)
pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
lsm_list_modules(0x0, &(0x7f0000000000), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r6}, 0x18)
pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0)
sendfile(r2, r2, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x4, 0x0, 0x11, 0x9, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e17bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310978072a8b070006584a128d7469166ffbffffff19e7df4af14e1df82d", [0x1, 0x7]})

2.65591293s ago: executing program 8 (id=4759):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value=r5}}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000740)=ANY=[], 0x0)

2.599770951s ago: executing program 2 (id=4760):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0x415}, 0x18)
unshare(0x64000600)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')

2.396701914s ago: executing program 8 (id=4761):
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0x13, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008001e758e0ccd5de769b390570000b703000000000000850000000400000095", @ANYRESOCT, @ANYBLOB="e2aa61b59584389c9d977120208a4ec984681d5baf9548649fe2214f4d1526cca8d05f9a5460e960e95889c71d6376dd8f0a932c1081d5c855be1adee4f293128507f83039b4f9ff3329b96877761b711f5b85d1e56fef115ae72e9dca33e24c355ab7a0c484eecc9f359c7671da7d6b243e2af4eb2cef53c663987b3d5463bfe82d8c9ccbe5dc0b9650a99e0077739b5e6bafd898adb1d596ad21903fd624f9cdd5d1a8534d385325b540c56326a0efda969ec9a4d7b25ecb770bf83e0da294fe", @ANYRES16, @ANYRESHEX, @ANYBLOB="ac8338ddab0d87fcc9ce4054ee3a8e8013b52041c1a7573f083248419e6282024738513c8b6bacdde94768e156c2587f2cfa5fac1b05f71b10348f61fa056703a4d499077544511bf6bef62109a01fca5f843521f9fc74374bb000102a047ca0ee9c5667a2f95e0805965fc015d4c1bd9b0d5de3d126a00958f3829ad4b75f2ab8d3e4bf063887208883d47a9435e8b34df075da2028d516216f732d51872c8053675358c745487c9cfab6341fd01c641356df4c723edc1e797d80dd748f654daf19ff3c0b7c6835cbae497b3c871ddb9bccb5", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
mmap(&(0x7f0000ce2000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r1, 0x913e0000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000c16000/0x4000)=nil, 0x4000, 0x2000003, 0x28011, r3, 0xac9d4000)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}]}, &(0x7f00000002c0)=0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x2a)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'caif0\x00'})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000efcf2d975b3b6b0a0a952b2f8b4f6b740a88dde1afcba911ee00080000c900010000000000000000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000140), 0x10075e, 0x80000)
r8 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5', 0x2)
pwritev(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x8)
ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8)
sendfile(r7, r7, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r7, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x4, 0x0, 0x11, 0x9, "28f5c9ca1faf40fd150b70aac11c2e17bd5bba7663c435aff94793ddd7aae07ef35f170001933bdb6fd7ecdd91b59ca8d54100", "07a9310978072a8b070006584a128d7469166ffbffffff19e7df4af14e1df82d", [0x1, 0x7]})
ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r6)

2.260574886s ago: executing program 6 (id=4763):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000300))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000880)={0x60, 0x3, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x9, 0x0, 0x0, 0x2, 0x40, 0x20, 0x22, 0x63})
r1 = socket$inet(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="bfc628bd7000ffdbdf251a000000050092008000000007002100626200081000228004"], 0x34}, 0x1, 0x0, 0x0, 0x20044044}, 0x800)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1181}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x3ff}}]}]}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0xd, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0xfffffffffffffd78, 0x5, 0x7}]}}]}, 0xac}}, 0x0)

2.135716388s ago: executing program 6 (id=4765):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc0200000000000000000000000000000002000000000000040100010100c204", @ANYRESOCT], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = socket$kcm(0x29, 0x2, 0x0)
recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18)
r5 = io_uring_setup(0x1a6d, &(0x7f0000000000)={0x0, 0x896d, 0x40, 0x42, 0x1f})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000540), 0x0)

1.96220154s ago: executing program 7 (id=4767):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0xec4c, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1dc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1}, 0x1c}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="a1ab00000000000000003200000008003a0156000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r4, 0x100, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8085)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000"], 0x48)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r7, 0xfffffffc)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
getdents64(r0, 0x0, 0x0)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r11}, 0x10)
setregid(0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0))

1.706802174s ago: executing program 2 (id=4769):
r0 = syz_io_uring_setup(0x250b, &(0x7f0000000100)={0x0, 0x10645c, 0x800, 0x400040, 0x240}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000200)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x5d, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x48080})
syz_io_uring_setup(0x3c00, &(0x7f00000005c0)={0x0, 0x8ecf, 0x1000, 0x1, 0x2ef}, 0x0, 0x0)
io_uring_enter(r0, 0x47f6, 0x0, 0x1000000000000000, 0x0, 0x0)

1.696798064s ago: executing program 7 (id=4770):
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0)
mmap(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0xcc4c6000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
r1 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50)
getdents(r1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
unshare(0x6a040000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000090000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
rename(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000003c0)='./file1\x00')
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kmem_cache_free\x00', r3, 0x0, 0x800}, 0x18)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getpid()
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
close_range(r5, 0xffffffffffffffff, 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000f00), 0x204200, 0x0)
copy_file_range(r5, 0x0, r6, 0x0, 0x8, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2000, 0x0)

1.663553075s ago: executing program 9 (id=4771):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value=r5}}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000740)=ANY=[], 0x0)

1.630253405s ago: executing program 9 (id=4772):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000015e500003d360000020000ff00000000a103fd647a7fe45ae608861766289267624444521e497f4597d2ad57d5798c3cc3bff83eb7fb4030526b4b524db302000000f82e983345af8087b591e5ab7d06cfc42678c12915feac2c3d2f9be0b354ac38588bc7c87680f861e9cdea08f794f4ecf7329f77f297507471bbd0773e15486c057bc97c32e397019dc05a5c7aa82bbd8a7000"/164, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r2 = socket(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r2, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5bcff1", 0x28)
connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write(r2, &(0x7f0000000980)="a9", 0x1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r0}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r0, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="c7e18c88f2190a44"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10)
timer_create(0x4, 0x0, &(0x7f0000bbdffc)=<r5=>0x0)
timer_getoverrun(r5)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)=@o_path={0x0, 0x0, 0x10}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000004000000090000000100000000160500", @ANYRES32=r1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="03000000040000000500"/24, @ANYRES32=r7, @ANYBLOB="c4d9d5e45016dfb8f7"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x87)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r9}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
tgkill(r6, r6, 0x1a)

1.480905247s ago: executing program 8 (id=4773):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = dup(r2)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000000206030000000000fffff000000000000900020073797a32000000000500040000000000200005000200000012000300686173683a6e65742c706f72740000000500010007"], 0x58}}, 0x0)

1.472193478s ago: executing program 8 (id=4774):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8e0000b535277602c8be9a8567828f711330ff2bb17b5508000000001f00", "dc5db43f", "80031f0000000200"}, 0x38)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r2}, 0x18)
socket(0x10, 0x803, 0x4)

1.303819561s ago: executing program 6 (id=4775):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)

1.073743034s ago: executing program 2 (id=4776):
chdir(0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0))
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 22)

1.023808315s ago: executing program 7 (id=4777):
getpid()
accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80800)
r0 = socket$key(0xf, 0x3, 0x2) (async, rerun: 64)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64)
r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x400000013) (async)
fcntl$dupfd(r2, 0x0, r2) (async)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)=0x2) (async, rerun: 64)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x1f4) (rerun: 64)
r4 = dup2(r3, r3)
ioctl$BLKTRACESETUP(r4, 0x401870cb, 0x0)
sendmmsg$unix(r4, 0x0, 0xffffffffffffffb9, 0x40004004) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) (async, rerun: 32)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) (async)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0)
close(r6)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 32)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) (rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000feffff3f17cc67ac35e64def26ea9754960000000000000000851000000600000085100000040000006608000000000000180000000000000000000000000000009500000000000000950000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

993.366885ms ago: executing program 2 (id=4778):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f00000002c0), 0x2000000}, 0x20)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003"], 0x44}}, 0x0)
memfd_create(&(0x7f0000000340)='system.posix_acl_access\x00', 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
r5 = fsopen(&(0x7f00000004c0)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
fchdir(r6)
open(&(0x7f0000000280)='.\x00', 0x0, 0x8)
close_range(r4, 0xffffffffffffffff, 0x0)

875.611957ms ago: executing program 2 (id=4779):
readv(0xffffffffffffffff, &(0x7f00000008c0), 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000300)={[{@grpjquota}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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") (fail_nth: 13)

584.410582ms ago: executing program 8 (id=4780):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x8, 0x8000000000000000}, 0x8, 0x0, 0x8409, 0x0, 0x0, 0x3c, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
capget(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='mlxsw_sp_acl_atcam_entry_add_ctcam_spill\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]})
mq_unlink(&(0x7f0000000340)='D')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_clone(0x1000, &(0x7f0000000240)="5ead6c1ffc5876d93fe46c31a14264a3e846fbf65e79530f37", 0x19, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f00000004c0)="de14b0c8b8ec80bca6b863b5f41765ccbd303035ad82d105866dd4b1e71ee2f049c67311ece74f12b296a553cc7254ae583194faf612f11101f84d5f9f19cca5bcddf6706050ebfc30f7475f95611ec61619c3f4ed7aa4f333c23c0d33b12c3ba5b681e993bdf0cf678b117233e5857b1c05d0a781d342453078ced46254e9054a4ca11084aa380229587e32577a7e0dcf5970196aa1e08319fbc88e2a87c739760f7fd8f7c13d0f6d9c7d13cda09256de3e0702f402edf2612da49292fbc28949129ab2cc602ea231c2d7d494d36eacbf7c7a380430f331")
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r5 = socket(0x10, 0x803, 0x0)
mmap(&(0x7f0000355000/0x4000)=nil, 0x4000, 0x1000006, 0x12, r5, 0x9edb8000)
syz_socket_connect_nvme_tcp()
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x202402, &(0x7f0000000700)={[{@dax_inode}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nogrpid}, {@init_itable}, {@usrjquota, 0x2e}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'jqfmt=vfsv0'}}, {@pcr={'pcr', 0x3d, 0x25}}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@fowner_eq}, {@pcr={'pcr', 0x3d, 0x1c}}, {@appraise_type}], 0x2c}, 0x0, 0x465, &(0x7f00000009c0)="$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")
setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="0200000001000400000000000400000000000000100006000000000020000000000000009c3afb9e1e748d8e274037dc22a3375e3d4bfbd5ed595ade8363bf523b58b4135330730a1e93c88867be7fc638218588f8654a3939194f60ec71a899851b85f5c69d5af421d28a45522c31dc8a594a2ec4f31759ce905e6754e8dba4358e86fac8f4904860cb8021520c81"], 0x24, 0x0)
listxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=""/20, 0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
fstat(r4, &(0x7f00000008c0))
iopl(0x3)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f00000003c0))
mkdirat(r7, &(0x7f0000000180)='./bus\x00', 0x0)

539.937523ms ago: executing program 9 (id=4781):
r0 = socket$packet(0x11, 0xa, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4)
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14ef0000", @ANYRES16=r5, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x801}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="19000000000000ff0000000020d05713e62aa7b4", @ANYBLOB="743e4a91875294fef98ecfc9b838abeb5338af8ef6157aa9f9a9f2a1418c071d4e8c4b903f73c3fe585c88e7694579dae2be44639234af266060e8592c0b88423907a17e3af8005b89410cc69cd0e9ef6a603badc0f282d3656d483d8a7919e7c9832af118fe", @ANYRESDEC=r2], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="19000000000000ff0000000020d05713e62aa7b4", @ANYBLOB="743e4a91875294fef98ecfc9b838abeb5338af8ef6157aa9f9a9f2a1418c071d4e8c4b903f73c3fe585c88e7694579dae2be44639234af266060e8592c0b88423907a17e3af8005b89410cc69cd0e9ef6a603badc0f282d3656d483d8a7919e7c9832af118fe", @ANYRESDEC=r2], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
fspick(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0) (async)
fspick(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='numa_maps\x00')
pread64(r8, &(0x7f0000002180)=""/4105, 0x137, 0x0)
sendmsg$AUDIT_USER_AVC(r8, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000005304000428bd7000fbdbdf25dc23d1d57f6736faa39bb1dacb77552604f665cdd7ed9c677c5ad23a6f1759c66621a901f0db437f5248f02ad5b7b0a2e2112fe965d51011"], 0x48}, 0x1, 0x0, 0x0, 0x60000000}, 0x4000000) (async)
sendmsg$AUDIT_USER_AVC(r8, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000005304000428bd7000fbdbdf25dc23d1d57f6736faa39bb1dacb77552604f665cdd7ed9c677c5ad23a6f1759c66621a901f0db437f5248f02ad5b7b0a2e2112fe965d51011"], 0x48}, 0x1, 0x0, 0x0, 0x60000000}, 0x4000000)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) (async)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, <r9=>0x0}, &(0x7f0000000140)=0xc)
setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000740)={{{@in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x3, 0x4e20, 0x2, 0xa, 0x10, 0x80, 0x87, 0x0, r9}, {0x8, 0x4, 0x1, 0x4, 0xb7, 0x9, 0x800, 0x101}, {0x7, 0x7, 0x32d, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1, 0x4d5, 0x2b}, 0xa, @in6=@private0, 0x0, 0x2, 0x2, 0x8, 0x9, 0x10, 0x800}}, 0xe8) (async)
setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000740)={{{@in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x3, 0x4e20, 0x2, 0xa, 0x10, 0x80, 0x87, 0x0, r9}, {0x8, 0x4, 0x1, 0x4, 0xb7, 0x9, 0x800, 0x101}, {0x7, 0x7, 0x32d, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1, 0x4d5, 0x2b}, 0xa, @in6=@private0, 0x0, 0x2, 0x2, 0x8, 0x9, 0x10, 0x800}}, 0xe8)
r10 = socket(0x400000000010, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r6, 0x58, &(0x7f0000000840)}, 0x10) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r6, 0x58, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r11=>0x0}}, 0x10)
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)
r12 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
sendmsg$nl_generic(r12, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000031c0)=ANY=[@ANYBLOB="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"], 0x11d4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000880)
r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r15}, 0x10)

387.904354ms ago: executing program 9 (id=4782):
r0 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040020746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d1787b351f0dda2d3d656bc3a2a75e0d", 0x20}], 0x1}}], 0x2, 0x4004040)

339.853335ms ago: executing program 9 (id=4783):
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x104040, &(0x7f0000000340)={[{@jqfmt_vfsold}, {@noload}]}, 0x2, 0x571, &(0x7f0000000d00)="$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")
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x7, 0x10}, 0x4c58, 0x3, 0x0, 0x37908b5f53b29c88, 0xc, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x4000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0))
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000040)={0x1000200, 0x0, 0x80000000, 0x10000, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0x0, 0x7fff})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000080)={[{@noblock_validity}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
time(0x0)

215.919547ms ago: executing program 6 (id=4784):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x80, 0x10003, 0x7fff, 0x5, 0x4, 0xf095, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b000000000000000000000000200000000000005ea40794637f65f6933db61108f132dc37254c60c666bdddb5b3674c6ac494af863dbd48b66ca8ba4425ff7bc9b9de72f02786fe9fe0bed3f5729d6b8049b6045f943cbac25fa8753fe2e0979d76637f29648468bd21ec67b003d820375240af6b962836a923c58ae32cc7f0fa851eb521b935b4722cce399eb1c98c7ecab54ebe6ab23c491ed50ac1bc46899167adbff64e0b394d9a7e8a185322d7ab35d8c6e548e237b531fc58109124d4754f280dd1f317109302cb08dce138b034fd6f4126f1be68b3cde8ddc9c2e0c54701e028f3445f94700483", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000a78ad6edd505872a5f4597d22bf2fc39"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRESOCT=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
lsm_get_self_attr(0x66, &(0x7f0000000240)={0x0, 0x0, 0xab, 0x8b, ""/139}, &(0x7f0000000040)=0xab, 0x0)
r2 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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")
r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f4)
mkdir(&(0x7f0000000040)='.\x02\x00', 0xe88022b11028290f)
r4 = perf_event_open(&(0x7f0000000040)={0x6, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0)
r5 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80b07, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100210, 0x0, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r4, 0xa)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, @void, @value}, 0x94)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0xfffffffc, 0x0, 0x400, 0x0, 0x30}, 0x9c)
bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xcc03, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r6, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$caif_stream(0x25, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2000c10, &(0x7f00000001c0)={[], [{@fsmagic={'fsmagic', 0x3d, 0xff}}]}, 0xfb, 0x23f, &(0x7f0000000780)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=")
setxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="020500000000000000100000000000082de243ffd6044000"/36], 0x24, 0x0)
openat(r2, 0x0, 0x82000, 0x0)

60.242279ms ago: executing program 9 (id=4785):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRES32=r0], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18)
r4 = socket$rds(0x15, 0x5, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x12000, 0x0)
ioctl$VT_OPENQRY(r5, 0x5600, &(0x7f0000000140))
bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)}, 0x4c050)
syslog(0x2, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='memory.current\x00', 0x275a, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r9}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r10}, 0x10)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0)
write$binfmt_script(r6, &(0x7f0000001400), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x18)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2420, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

0s ago: executing program 2 (id=4786):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000006c0)=@newtaction={0x64, 0x30, 0x9, 0xf00, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x207}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (fail_nth: 1)

kernel console output (not intermixed with test programs):

cleaned up
[  340.012547][T16760] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  340.029487][T16762] EXT4-fs (loop7): 1 truncate cleaned up
[  340.039208][T16762] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  340.043679][T16779] loop6: detected capacity change from 0 to 512
[  340.060517][T16779] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  340.069800][T13528] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.082865][T10731] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.093578][T16780] loop2: detected capacity change from 0 to 1024
[  340.132913][T16776] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  340.151076][T16776] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[  340.163674][T16776] EXT4-fs (loop2): This should not happen!! Data will be lost
[  340.163674][T16776] 
[  340.173400][T16776] EXT4-fs (loop2): Total free blocks count 0
[  340.175028][T16790] loop7: detected capacity change from 0 to 512
[  340.179469][T16776] EXT4-fs (loop2): Free/Dirty block details
[  340.179487][T16776] EXT4-fs (loop2): free_blocks=4293918720
[  340.197584][T16776] EXT4-fs (loop2): dirty_blocks=64
[  340.202728][T16776] EXT4-fs (loop2): Block reservation details
[  340.208823][T16776] EXT4-fs (loop2): i_reserved_data_blocks=4
[  340.396040][T16814] loop7: detected capacity change from 0 to 512
[  340.450801][T16814] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  340.459761][T16817] rtc_cmos 00:00: Alarms can be up to one day in the future
[  340.515994][T16814] EXT4-fs (loop7): orphan cleanup on readonly fs
[  340.606174][T16814] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  340.704635][T16814] EXT4-fs (loop7): Cannot turn on quotas: error -117
[  340.736351][T16831] loop9: detected capacity change from 0 to 512
[  340.769247][T16814] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4323: bg 0: block 40: padding at end of block bitmap is not set
[  340.824667][T16814] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  340.921864][T16814] EXT4-fs (loop7): 1 truncate cleaned up
[  340.944433][   T29] kauditd_printk_skb: 286 callbacks suppressed
[  340.944452][   T29] audit: type=1400 audit(341.381:17356): avc:  denied  { ioctl } for  pid=16834 comm="syz.8.4327" path="socket:[53260]" dev="sockfs" ino=53260 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  341.010716][ T3394] rtc_cmos 00:00: Alarms can be up to one day in the future
[  341.018569][ T3394] rtc_cmos 00:00: Alarms can be up to one day in the future
[  341.026283][ T3394] rtc_cmos 00:00: Alarms can be up to one day in the future
[  341.033949][ T3394] rtc_cmos 00:00: Alarms can be up to one day in the future
[  341.041361][ T3394] rtc rtc0: __rtc_set_alarm: err=-22
[  341.121575][   T29] audit: type=1326 audit(341.562:17357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16852 comm="syz.8.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017974e929 code=0x7ffc0000
[  341.144922][   T29] audit: type=1326 audit(341.562:17358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16852 comm="syz.8.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017974e929 code=0x7ffc0000
[  341.171486][   T29] audit: type=1326 audit(341.562:17359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16852 comm="syz.8.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f017974e929 code=0x7ffc0000
[  341.194636][   T29] audit: type=1326 audit(341.562:17360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16852 comm="syz.8.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017974e929 code=0x7ffc0000
[  341.217917][   T29] audit: type=1326 audit(341.562:17361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16852 comm="syz.8.4334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017974e929 code=0x7ffc0000
[  341.238114][T16853] loop8: detected capacity change from 0 to 2048
[  341.255068][T16857] rtc_cmos 00:00: Alarms can be up to one day in the future
[  341.265551][   T29] audit: type=1400 audit(341.712:17362): avc:  denied  { bind } for  pid=16858 comm="syz.9.4337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  341.310503][T16853] EXT4-fs (loop8): failed to initialize system zone (-117)
[  341.318764][T16853] EXT4-fs (loop8): mount failed
[  341.324951][   T29] audit: type=1400 audit(341.752:17363): avc:  denied  { kexec_image_load } for  pid=16865 comm="syz.6.4338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  341.344733][   T29] audit: type=1400 audit(341.752:17364): avc:  denied  { wake_alarm } for  pid=16865 comm="syz.6.4338" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  341.419425][T16874] loop6: detected capacity change from 0 to 512
[  341.525182][   T29] audit: type=1400 audit(341.962:17365): avc:  denied  { read } for  pid=16882 comm="syz.2.4345" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  341.648508][T16887] loop9: detected capacity change from 0 to 2048
[  341.744866][T16887]  loop9: p2 p3 p7
[  341.868114][T16889] FAULT_INJECTION: forcing a failure.
[  341.868114][T16889] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  341.881319][T16889] CPU: 1 UID: 0 PID: 16889 Comm: syz.9.4347 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) 
[  341.881346][T16889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  341.881360][T16889] Call Trace:
[  341.881369][T16889]  <TASK>
[  341.881379][T16889]  __dump_stack+0x1d/0x30
[  341.881474][T16889]  dump_stack_lvl+0xe8/0x140
[  341.881558][T16889]  dump_stack+0x15/0x1b
[  341.881580][T16889]  should_fail_ex+0x265/0x280
[  341.881621][T16889]  should_fail+0xb/0x20
[  341.881652][T16889]  should_fail_usercopy+0x1a/0x20
[  341.881685][T16889]  _copy_to_user+0x20/0xa0
[  341.881711][T16889]  simple_read_from_buffer+0xb5/0x130
[  341.881760][T16889]  proc_fail_nth_read+0x100/0x140
[  341.881787][T16889]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  341.881821][T16889]  vfs_read+0x1a0/0x6f0
[  341.881916][T16889]  ? __rcu_read_unlock+0x4f/0x70
[  341.881944][T16889]  ? __fget_files+0x184/0x1c0
[  341.881974][T16889]  ksys_read+0xda/0x1a0
[  341.882008][T16889]  __x64_sys_read+0x40/0x50
[  341.882132][T16889]  x64_sys_call+0x2d77/0x2fb0
[  341.882152][T16889]  do_syscall_64+0xd2/0x200
[  341.882175][T16889]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  341.882205][T16889]  ? clear_bhb_loop+0x40/0x90
[  341.882298][T16889]  ? clear_bhb_loop+0x40/0x90
[  341.882319][T16889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.882339][T16889] RIP: 0033:0x7fb77836d33c
[  341.882354][T16889] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  341.882377][T16889] RSP: 002b:00007fb7769d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  341.882444][T16889] RAX: ffffffffffffffda RBX: 00007fb778595fa0 RCX: 00007fb77836d33c
[  341.882476][T16889] RDX: 000000000000000f RSI: 00007fb7769d70a0 RDI: 0000000000000005
[  341.882488][T16889] RBP: 00007fb7769d7090 R08: 0000000000000000 R09: 0000000000000000
[  341.882500][T16889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  341.882516][T16889] R13: 0000000000000000 R14: 00007fb778595fa0 R15: 00007fffd7ff0688
[  341.882543][T16889]  </TASK>
[  341.968618][ T3379] rtc_cmos 00:00: Alarms can be up to one day in the future
[  341.986117][T16874] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  341.988496][ T3379] rtc_cmos 00:00: Alarms can be up to one day in the future
[  342.113503][ T3379] rtc_cmos 00:00: Alarms can be up to one day in the future
[  342.121218][ T3379] rtc_cmos 00:00: Alarms can be up to one day in the future
[  342.128621][ T3379] rtc rtc0: __rtc_set_alarm: err=-22
[  342.129487][T16874] EXT4-fs (loop6): orphan cleanup on readonly fs
[  342.140800][T16874] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  342.179437][T16874] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  342.196865][T16874] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4341: bg 0: block 40: padding at end of block bitmap is not set
[  342.225903][T16874] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  342.238180][T16900] loop7: detected capacity change from 0 to 128
[  342.240131][T16874] EXT4-fs (loop6): 1 truncate cleaned up
[  342.246689][T16900] FAT-fs (loop7): Directory bread(block 11554) failed
[  342.258302][T16900] FAT-fs (loop7): Directory bread(block 11555) failed
[  342.265605][T16900] FAT-fs (loop7): Directory bread(block 11556) failed
[  342.272458][T16900] FAT-fs (loop7): Directory bread(block 11557) failed
[  342.284289][T16900] FAT-fs (loop7): Directory bread(block 11558) failed
[  342.293005][T16900] FAT-fs (loop7): Directory bread(block 11559) failed
[  342.302209][T16894] xt_CT: No such helper "pptp"
[  342.302310][T16900] FAT-fs (loop7): Directory bread(block 11560) failed
[  342.313952][T16900] FAT-fs (loop7): Directory bread(block 11561) failed
[  342.321600][T16900] FAT-fs (loop7): Directory bread(block 11562) failed
[  342.328598][T16900] FAT-fs (loop7): Directory bread(block 11563) failed
[  342.339362][T16894] loop9: detected capacity change from 0 to 1024
[  342.369140][T16907] __nla_validate_parse: 9 callbacks suppressed
[  342.369160][T16907] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4353'.
[  342.399918][T16910] loop8: detected capacity change from 0 to 512
[  342.429335][T16910] EXT4-fs error (device loop8): ext4_empty_dir:3075: inode #12: comm syz.8.4354: invalid size
[  342.440359][T16914] rtc_cmos 00:00: Alarms can be up to one day in the future
[  342.443077][T16910] EXT4-fs (loop8): Remounting filesystem read-only
[  342.488862][T13400] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  342.818985][ T6783] rtc_cmos 00:00: Alarms can be up to one day in the future
[  342.826700][ T6783] rtc_cmos 00:00: Alarms can be up to one day in the future
[  342.834413][ T6783] rtc_cmos 00:00: Alarms can be up to one day in the future
[  342.842073][ T6783] rtc_cmos 00:00: Alarms can be up to one day in the future
[  342.849402][ T6783] rtc rtc0: __rtc_set_alarm: err=-22
[  343.311710][T16949] x_tables: unsorted entry at hook 3
[  343.408028][T16954] vlan2: entered allmulticast mode
[  343.470514][T16956] FAULT_INJECTION: forcing a failure.
[  343.470514][T16956] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  343.483671][T16956] CPU: 1 UID: 0 PID: 16956 Comm: syz.8.4370 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) 
[  343.483701][T16956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  343.483794][T16956] Call Trace:
[  343.483802][T16956]  <TASK>
[  343.483812][T16956]  __dump_stack+0x1d/0x30
[  343.483840][T16956]  dump_stack_lvl+0xe8/0x140
[  343.483863][T16956]  dump_stack+0x15/0x1b
[  343.483879][T16956]  should_fail_ex+0x265/0x280
[  343.483911][T16956]  should_fail+0xb/0x20
[  343.483989][T16956]  should_fail_usercopy+0x1a/0x20
[  343.484082][T16956]  _copy_from_user+0x1c/0xb0
[  343.484102][T16956]  io_register_rsrc_update+0x5f/0x120
[  343.484172][T16956]  __se_sys_io_uring_register+0x6d9/0xeb0
[  343.484194][T16956]  ? fput+0x8f/0xc0
[  343.484280][T16956]  ? ksys_write+0x192/0x1a0
[  343.484305][T16956]  __x64_sys_io_uring_register+0x55/0x70
[  343.484331][T16956]  x64_sys_call+0xc91/0x2fb0
[  343.484360][T16956]  do_syscall_64+0xd2/0x200
[  343.484380][T16956]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  343.484463][T16956]  ? clear_bhb_loop+0x40/0x90
[  343.484488][T16956]  ? clear_bhb_loop+0x40/0x90
[  343.484511][T16956]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.484539][T16956] RIP: 0033:0x7f017974e929
[  343.484637][T16956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  343.484656][T16956] RSP: 002b:00007f0177db7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  343.484680][T16956] RAX: ffffffffffffffda RBX: 00007f0179975fa0 RCX: 00007f017974e929
[  343.484697][T16956] RDX: 0000200000000240 RSI: 0000000000000010 RDI: 0000000000000006
[  343.484709][T16956] RBP: 00007f0177db7090 R08: 0000000000000000 R09: 0000000000000000
[  343.484804][T16956] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001
[  343.484816][T16956] R13: 0000000000000000 R14: 00007f0179975fa0 R15: 00007ffe07998a48
[  343.484835][T16956]  </TASK>
[  343.721988][T16965] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4372'.
[  343.743982][T16965] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4372'.
[  343.746021][T16967] smc: net device bond0 applied user defined pnetid SYZ2
[  343.793346][T16967] smc: net device bond0 erased user defined pnetid SYZ2
[  343.814597][T16960] lo speed is unknown, defaulting to 1000
[  343.822377][T16969] loop9: detected capacity change from 0 to 512
[  343.840816][T16969] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  343.873071][T16969] EXT4-fs mount: 16 callbacks suppressed
[  343.873090][T16969] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.990221][T16981] loop7: detected capacity change from 0 to 512
[  344.000596][T16979] loop8: detected capacity change from 0 to 512
[  344.008455][T16981] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  344.054115][T16979] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  344.084182][T16979] EXT4-fs (loop8): orphan cleanup on readonly fs
[  344.104800][T13528] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.117426][T16979] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  344.153251][T16979] EXT4-fs (loop8): Cannot turn on quotas: error -117
[  344.166118][T16990] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  344.174410][T16990] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  344.186162][T16993] loop6: detected capacity change from 0 to 512
[  344.192983][T16979] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4377: bg 0: block 40: padding at end of block bitmap is not set
[  344.208414][T16993] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  344.208494][T16979] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  344.217533][T16993] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  344.253776][T16979] EXT4-fs (loop8): 1 truncate cleaned up
[  344.273536][T16993] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  344.278234][T16979] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  344.292906][T16993] System zones: 0-2, 18-18, 34-34
[  344.311682][T16993] EXT4-fs error (device loop6): ext4_orphan_get:1393: comm syz.6.4378: inode #15: comm syz.6.4378: iget: illegal inode #
[  344.313877][T16999] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4382'.
[  344.351651][T16993] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.4378: couldn't read orphan inode 15 (err -117)
[  344.372338][T17000] hsr0: entered promiscuous mode
[  344.380323][T12643] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.380653][T16999] netlink: 'syz.2.4382': attribute type 6 has an invalid length.
[  344.403172][T16993] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  344.476211][T17006] wg2: entered promiscuous mode
[  344.481152][T17006] wg2: entered allmulticast mode
[  344.499072][ T8208] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.513903][T17008] rtc_cmos 00:00: Alarms can be up to one day in the future
[  344.596219][T17017] smc: net device bond0 applied user defined pnetid SYZ2
[  344.621288][T17017] smc: net device bond0 erased user defined pnetid SYZ2
[  344.690613][T17029] rtc_cmos 00:00: Alarms can be up to one day in the future
[  344.707547][T17033] netlink: 'syz.8.4393': attribute type 6 has an invalid length.
[  344.716613][T17031] team0: No ports can be present during mode change
[  344.748528][T17031] vlan2: entered allmulticast mode
[  344.818878][ T6783] rtc_cmos 00:00: Alarms can be up to one day in the future
[  344.826661][ T6783] rtc_cmos 00:00: Alarms can be up to one day in the future
[  344.834695][ T6783] rtc_cmos 00:00: Alarms can be up to one day in the future
[  344.842543][ T6783] rtc_cmos 00:00: Alarms can be up to one day in the future
[  344.850038][ T6783] rtc rtc0: __rtc_set_alarm: err=-22
[  344.989101][T17048] loop9: detected capacity change from 0 to 164
[  345.022647][T17048] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4399'.
[  345.063731][T17048] ipvlan2: entered promiscuous mode
[  345.100829][T17059] smc: net device bond0 applied user defined pnetid SYZ2
[  345.122040][T17059] smc: net device bond0 erased user defined pnetid SYZ2
[  345.277096][T17086] FAULT_INJECTION: forcing a failure.
[  345.277096][T17086] name failslab, interval 1, probability 0, space 0, times 0
[  345.289870][T17086] CPU: 1 UID: 0 PID: 17086 Comm: syz.2.4409 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) 
[  345.289902][T17086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  345.289919][T17086] Call Trace:
[  345.289928][T17086]  <TASK>
[  345.289938][T17086]  __dump_stack+0x1d/0x30
[  345.290038][T17086]  dump_stack_lvl+0xe8/0x140
[  345.290057][T17086]  dump_stack+0x15/0x1b
[  345.290075][T17086]  should_fail_ex+0x265/0x280
[  345.290111][T17086]  ? vlan_dev_set_egress_priority+0x113/0x200
[  345.290221][T17086]  should_failslab+0x8c/0xb0
[  345.290265][T17086]  __kmalloc_cache_noprof+0x4c/0x320
[  345.290298][T17086]  vlan_dev_set_egress_priority+0x113/0x200
[  345.290333][T17086]  vlan_changelink+0x254/0x2e0
[  345.290359][T17086]  vlan_newlink+0x307/0x370
[  345.290380][T17086]  ? __pfx_vlan_newlink+0x10/0x10
[  345.290400][T17086]  rtnl_newlink_create+0x1bc/0x620
[  345.290474][T17086]  ? security_capable+0x83/0x90
[  345.290509][T17086]  ? netlink_ns_capable+0x86/0xa0
[  345.290547][T17086]  rtnl_newlink+0xf29/0x12d0
[  345.290618][T17086]  ? xas_load+0x413/0x430
[  345.290651][T17086]  ? __rcu_read_unlock+0x4f/0x70
[  345.290680][T17086]  ? xa_load+0xb1/0xe0
[  345.290699][T17086]  ? __rcu_read_unlock+0x4f/0x70
[  345.290738][T17086]  ? avc_has_perm_noaudit+0x1b1/0x200
[  345.290776][T17086]  ? selinux_capable+0x1f9/0x270
[  345.290812][T17086]  ? security_capable+0x83/0x90
[  345.290858][T17086]  ? ns_capable+0x7d/0xb0
[  345.290881][T17086]  ? __pfx_rtnl_newlink+0x10/0x10
[  345.290904][T17086]  rtnetlink_rcv_msg+0x5fb/0x6d0
[  345.290925][T17086]  ? avc_has_perm_noaudit+0x1b1/0x200
[  345.290969][T17086]  netlink_rcv_skb+0x120/0x220
[  345.291009][T17086]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  345.291046][T17086]  rtnetlink_rcv+0x1c/0x30
[  345.291082][T17086]  netlink_unicast+0x5a1/0x670
[  345.291113][T17086]  netlink_sendmsg+0x58b/0x6b0
[  345.291134][T17086]  ? __pfx_netlink_sendmsg+0x10/0x10
[  345.291160][T17086]  __sock_sendmsg+0x142/0x180
[  345.291256][T17086]  ____sys_sendmsg+0x31e/0x4e0
[  345.291298][T17086]  ___sys_sendmsg+0x17b/0x1d0
[  345.291392][T17086]  __x64_sys_sendmsg+0xd4/0x160
[  345.291438][T17086]  x64_sys_call+0x2999/0x2fb0
[  345.291501][T17086]  do_syscall_64+0xd2/0x200
[  345.291518][T17086]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  345.291543][T17086]  ? clear_bhb_loop+0x40/0x90
[  345.291570][T17086]  ? clear_bhb_loop+0x40/0x90
[  345.291599][T17086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.291680][T17086] RIP: 0033:0x7f1658f2e929
[  345.291696][T17086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  345.291720][T17086] RSP: 002b:00007f1657597038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  345.291743][T17086] RAX: ffffffffffffffda RBX: 00007f1659155fa0 RCX: 00007f1658f2e929
[  345.291755][T17086] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004
[  345.291766][T17086] RBP: 00007f1657597090 R08: 0000000000000000 R09: 0000000000000000
[  345.291778][T17086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  345.291880][T17086] R13: 0000000000000000 R14: 00007f1659155fa0 R15: 00007ffe463477e8
[  345.291908][T17086]  </TASK>
[  345.638615][T17060] lo speed is unknown, defaulting to 1000
[  345.734976][T17094] loop9: detected capacity change from 0 to 512
[  345.751606][T17094] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  345.768556][T17094] EXT4-fs (loop9): orphan cleanup on readonly fs
[  345.782137][T17094] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  345.817447][T17094] EXT4-fs (loop9): Cannot turn on quotas: error -117
[  345.834078][T17094] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4413: bg 0: block 40: padding at end of block bitmap is not set
[  345.865446][T17094] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  345.880676][T17060] chnl_net:caif_netlink_parms(): no params data found
[  345.884475][T17094] EXT4-fs (loop9): 1 truncate cleaned up
[  345.903939][T17094] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  345.956438][T13528] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.974156][T17060] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.981390][T17060] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.996394][T17060] bridge_slave_0: entered allmulticast mode
[  346.014348][T17060] bridge_slave_0: entered promiscuous mode
[  346.039449][T17060] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.046695][T17060] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.071149][T17060] bridge_slave_1: entered allmulticast mode
[  346.084966][T17060] bridge_slave_1: entered promiscuous mode
[  346.106341][T13399] dummy0: left allmulticast mode
[  346.113013][T13399] bridge0: port 3(dummy0) entered disabled state
[  346.131451][T13399] bridge_slave_1: left allmulticast mode
[  346.137218][T13399] bridge_slave_1: left promiscuous mode
[  346.143003][T13399] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.162944][T13399] bridge_slave_0: left promiscuous mode
[  346.168712][T13399] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.241304][T13399] bridge0 (unregistering): left promiscuous mode
[  346.393395][T13399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  346.403466][T13399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  346.415239][T13399] bond0 (unregistering): Released all slaves
[  346.424003][T13399] bond1 (unregistering): Released all slaves
[  346.432787][T13399] bond2 (unregistering): Released all slaves
[  346.451696][T13399] bond3 (unregistering): Released all slaves
[  346.461240][T13399] bond4 (unregistering): Released all slaves
[  346.476630][T17114] netdevsim netdevsim9: Direct firmware load for ÈöníñÆgkNšÄq>ä*x(Oˆ@ failed with error -2
[  346.502801][T17060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  346.523221][T13399] tipc: Disabling bearer <udp:syz0>
[  346.528499][T13399] tipc: Disabling bearer <ib:caif0>
[  346.548750][T13399] tipc: Left network mode
[  346.554649][T17060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  346.567154][T17116] smc: net device bond0 applied user defined pnetid SYZ2
[  346.592686][T17116] smc: net device bond0 erased user defined pnetid SYZ2
[  346.622761][T17060] team0: Port device team_slave_0 added
[  346.672359][   T29] kauditd_printk_skb: 188 callbacks suppressed
[  346.672376][   T29] audit: type=1400 audit(347.129:17549): avc:  denied  { write } for  pid=17119 comm="syz.9.4418" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  346.672855][T17060] team0: Port device team_slave_1 added
[  346.706287][T17122] loop8: detected capacity change from 0 to 512
[  346.718641][T13399] hsr_slave_0: left promiscuous mode
[  346.728971][T13399] hsr_slave_1: left promiscuous mode
[  346.734602][T13399] batman_adv: batadv0: Removing interface: batadv_slave_0
[  346.752001][T17122] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  346.781164][T17122] EXT4-fs (loop8): orphan cleanup on readonly fs
[  346.788622][T17122] Quota error (device loop8): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  346.800929][T13399] batman_adv: batadv0: Removing interface: batadv_slave_1
[  346.808260][T17122] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  346.845162][T17122] EXT4-fs (loop8): Cannot turn on quotas: error -117
[  346.861964][T17122] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4419: bg 0: block 40: padding at end of block bitmap is not set
[  346.897623][T13399] team0 (unregistering): Port device team_slave_1 removed
[  346.909957][T17122] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  346.919350][T17122] EXT4-fs (loop8): 1 truncate cleaned up
[  346.926614][T17122] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  346.944215][T13399] team0 (unregistering): Port device team_slave_0 removed
[  346.988161][T12643] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.065296][ T6783] lo speed is unknown, defaulting to 1000
[  347.071150][ T6783] infiniband syz0: ib_query_port failed (-19)
[  347.100421][T17060] batman_adv: batadv0: Adding interface: batadv_slave_0
[  347.107574][T17060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.134297][T17060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  347.154985][T17060] batman_adv: batadv0: Adding interface: batadv_slave_1
[  347.162092][T17060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.188267][T17060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  347.236048][   T29] audit: type=1400 audit(347.689:17550): avc:  denied  { write } for  pid=17142 comm="syz.9.4425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  347.240683][T17144] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4425'.
[  347.255127][   T29] audit: type=1400 audit(347.689:17551): avc:  denied  { connect } for  pid=17142 comm="syz.9.4425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  347.264093][T17144] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4425'.
[  347.292492][   T29] audit: type=1400 audit(347.689:17552): avc:  denied  { name_connect } for  pid=17142 comm="syz.9.4425" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  347.320754][   T29] audit: type=1400 audit(347.689:17553): avc:  denied  { shutdown } for  pid=17142 comm="syz.9.4425" laddr=fe80::12 lport=43113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  347.346164][   T29] audit: type=1400 audit(347.799:17554): avc:  denied  { getopt } for  pid=17142 comm="syz.9.4425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  347.366750][T17060] hsr_slave_0: entered promiscuous mode
[  347.373300][T17060] hsr_slave_1: entered promiscuous mode
[  347.379606][T17060] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  347.387187][T17060] Cannot create hsr debugfs directory
[  347.393333][T17146] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4426'.
[  347.402390][T17146] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4426'.
[  347.616388][T17161] loop8: detected capacity change from 0 to 128
[  347.700790][   T29] audit: type=1326 audit(348.150:17555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17160 comm="syz.8.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017974e929 code=0x7ffc0000
[  347.736167][T17060] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  347.758615][   T29] audit: type=1326 audit(348.150:17556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17160 comm="syz.8.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f017974e929 code=0x7ffc0000
[  347.781760][   T29] audit: type=1326 audit(348.150:17557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17160 comm="syz.8.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017974e929 code=0x7ffc0000
[  347.815243][T17163] netdevsim netdevsim9: Direct firmware load for ÈöníñÆgkNšÄq>ä*x(Oˆ@ failed with error -2
[  347.827604][T17060] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  347.835251][T17161] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4431'.
[  347.851019][T17161] 0ªX¹¦D: renamed from gretap0 (while UP)
[  347.866084][T17161] 0ªX¹¦D: entered allmulticast mode
[  347.877579][T17161] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  347.893423][T17060] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  347.920408][T17060] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  347.988749][T17177] __vm_enough_memory: pid: 17177, comm: syz.9.4434, bytes: 21196160118784 not enough memory for the allocation
[  348.062901][T17060] 8021q: adding VLAN 0 to HW filter on device bond0
[  348.091448][T17060] 8021q: adding VLAN 0 to HW filter on device team0
[  348.115129][T13399] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.122280][T13399] bridge0: port 1(bridge_slave_0) entered forwarding state
[  348.168203][T13399] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.175360][T13399] bridge0: port 2(bridge_slave_1) entered forwarding state
[  348.228927][T17189] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  348.237446][T17189] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  348.256472][T17177] loop9: detected capacity change from 0 to 512
[  348.265394][T17189] netlink: 68 bytes leftover after parsing attributes in process `+}[@'.
[  348.308177][T17177] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  348.327692][T10731] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  348.351869][T17194] rtc_cmos 00:00: Alarms can be up to one day in the future
[  348.371870][T17177] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c0a8, mo2=0002]
[  348.404384][T17060] 8021q: adding VLAN 0 to HW filter on device batadv0
[  348.413849][T17177] System zones: 1-12
[  348.421394][T17200] loop7: detected capacity change from 0 to 256
[  348.430775][T17177] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: inode #11: comm syz.9.4434: missing EA_INODE flag
[  348.490165][T17177] EXT4-fs (loop9): Remounting filesystem read-only
[  348.507565][T17177] EXT4-fs (loop9): 1 orphan inode deleted
[  348.538665][T17177] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  348.576211][T17177] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.620839][T17217] loop7: detected capacity change from 0 to 1756
[  348.734454][T17060] veth0_vlan: entered promiscuous mode
[  348.800289][T17060] veth1_vlan: entered promiscuous mode
[  348.827515][ T3394] rtc_cmos 00:00: Alarms can be up to one day in the future
[  348.835341][ T3394] rtc_cmos 00:00: Alarms can be up to one day in the future
[  348.843136][ T3394] rtc_cmos 00:00: Alarms can be up to one day in the future
[  348.850994][ T3394] rtc_cmos 00:00: Alarms can be up to one day in the future
[  348.858380][ T3394] rtc rtc0: __rtc_set_alarm: err=-22
[  348.896729][T17060] veth0_macvtap: entered promiscuous mode
[  348.906517][T17234] loop7: detected capacity change from 0 to 512
[  348.919456][T17060] veth1_macvtap: entered promiscuous mode
[  348.939341][T17234] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  348.984623][T17234] EXT4-fs: Ignoring removed orlov option
[  348.986507][T17060] batman_adv: batadv0: Interface activated: batadv_slave_0
[  348.990562][T17234] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  349.025900][T17242] loop9: detected capacity change from 0 to 512
[  349.051498][T17234] EXT4-fs (loop7): can't enable nombcache during remount
[  349.060065][T17060] batman_adv: batadv0: Interface activated: batadv_slave_1
[  349.082071][T17242] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm +}[@: bg 0: block 5: invalid block bitmap
[  349.088419][T17060] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  349.102947][T17060] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  349.112075][T17060] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  349.120834][T17060] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  349.146011][T17242] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  349.158239][T17242] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 3 (level 2)
[  349.171295][T17242] EXT4-fs (loop9): 2 truncates cleaned up
[  349.179569][T17242] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  349.230050][T13528] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.298875][T17249] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4400'.
[  349.313439][T17249] IPv6: NLM_F_CREATE should be specified when creating new route
[  349.322010][T17249] Invalid ELF header magic: != ELF
[  349.346615][T17247] lo speed is unknown, defaulting to 1000
[  349.367817][T17247] lo speed is unknown, defaulting to 1000
[  349.388544][T17253] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4452'.
[  349.391128][T17247] lo speed is unknown, defaulting to 1000
[  349.420819][T17247] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  349.473845][T17247] lo speed is unknown, defaulting to 1000
[  349.489811][T17247] lo speed is unknown, defaulting to 1000
[  349.502726][T17247] lo speed is unknown, defaulting to 1000
[  349.510143][T17260] smc: net device bond0 applied user defined pnetid SYZ2
[  349.517027][T17247] lo speed is unknown, defaulting to 1000
[  349.530057][T17247] lo speed is unknown, defaulting to 1000
[  349.570150][T17263] smc: net device bond0 erased user defined pnetid SYZ2
[  349.829090][T17285] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4463'.
[  349.872941][T17281] IPv4: Oversized IP packet from 127.202.26.0
[  349.999328][T17290] tipc: Started in network mode
[  350.004334][T17290] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  350.041519][T17290] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0001
[  350.049844][T17290] tipc: Enabled bearer <udp:syz1>, priority 7
[  350.127870][T17293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4464'.
[  350.409733][T17240] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set
[  350.546037][T17295] lo speed is unknown, defaulting to 1000
[  350.680316][T17299] SELinux: failed to load policy
[  351.015359][T17306] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4467'.
[  351.817725][   T29] kauditd_printk_skb: 117 callbacks suppressed
[  351.817745][   T29] audit: type=1400 audit(351.823:17675): avc:  denied  { prog_load } for  pid=17302 comm="syz.8.4468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  351.842775][   T29] audit: type=1400 audit(351.823:17676): avc:  denied  { bpf } for  pid=17302 comm="syz.8.4468" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  351.862984][   T29] audit: type=1400 audit(351.823:17677): avc:  denied  { perfmon } for  pid=17302 comm="syz.8.4468" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  351.883455][   T29] audit: type=1400 audit(351.823:17678): avc:  denied  { prog_run } for  pid=17302 comm="syz.8.4468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  351.915015][ T6783] tipc: Node number set to 1
[  352.027391][T17307] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4468'.
[  352.046738][   T29] audit: type=1400 audit(352.393:17679): avc:  denied  { unmount } for  pid=10731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  352.066074][   T29] audit: type=1400 audit(352.473:17680): avc:  denied  { read } for  pid=17302 comm="syz.8.4468" dev="nsfs" ino=4026532424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  352.072442][T10731] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.086849][   T29] audit: type=1400 audit(352.473:17681): avc:  denied  { open } for  pid=17302 comm="syz.8.4468" path="net:[4026532424]" dev="nsfs" ino=4026532424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  352.086886][   T29] audit: type=1400 audit(352.473:17682): avc:  denied  { create } for  pid=17302 comm="syz.8.4468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  352.086916][   T29] audit: type=1400 audit(352.483:17683): avc:  denied  { ioctl } for  pid=17302 comm="syz.8.4468" path="socket:[54452]" dev="sockfs" ino=54452 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  352.163241][   T29] audit: type=1400 audit(352.583:17684): avc:  denied  { map_create } for  pid=17308 comm="syz.2.4470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  352.272275][T17321] netlink: 'syz.2.4474': attribute type 4 has an invalid length.
[  352.290047][T17323] random: crng reseeded on system resumption
[  352.337548][T17325] netlink: 'syz.6.4476': attribute type 1 has an invalid length.
[  352.345469][T17325] netlink: 'syz.6.4476': attribute type 2 has an invalid length.
[  352.416379][T17331] loop7: detected capacity change from 0 to 16384
[  352.429046][T17331] FAULT_INJECTION: forcing a failure.
[  352.429046][T17331] name failslab, interval 1, probability 0, space 0, times 0
[  352.441857][T17331] CPU: 1 UID: 0 PID: 17331 Comm: syz.2.4480 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) 
[  352.441888][T17331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  352.441905][T17331] Call Trace:
[  352.441912][T17331]  <TASK>
[  352.441920][T17331]  __dump_stack+0x1d/0x30
[  352.441946][T17331]  dump_stack_lvl+0xe8/0x140
[  352.441971][T17331]  dump_stack+0x15/0x1b
[  352.442020][T17331]  should_fail_ex+0x265/0x280
[  352.442054][T17331]  ? alloc_pipe_info+0xae/0x350
[  352.442078][T17331]  should_failslab+0x8c/0xb0
[  352.442102][T17331]  __kmalloc_cache_noprof+0x4c/0x320
[  352.442156][T17331]  alloc_pipe_info+0xae/0x350
[  352.442181][T17331]  splice_direct_to_actor+0x592/0x680
[  352.442275][T17331]  ? kstrtouint_from_user+0x9f/0xf0
[  352.442330][T17331]  ? __pfx_direct_splice_actor+0x10/0x10
[  352.442368][T17331]  ? __rcu_read_unlock+0x4f/0x70
[  352.442391][T17331]  ? get_pid_task+0x96/0xd0
[  352.442409][T17331]  ? avc_policy_seqno+0x15/0x30
[  352.442440][T17331]  ? selinux_file_permission+0x1e4/0x320
[  352.442472][T17331]  do_splice_direct+0xda/0x150
[  352.442503][T17331]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  352.442598][T17331]  do_sendfile+0x380/0x650
[  352.442626][T17331]  __x64_sys_sendfile64+0x105/0x150
[  352.442655][T17331]  x64_sys_call+0xb39/0x2fb0
[  352.442717][T17331]  do_syscall_64+0xd2/0x200
[  352.442735][T17331]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  352.442768][T17331]  ? clear_bhb_loop+0x40/0x90
[  352.442795][T17331]  ? clear_bhb_loop+0x40/0x90
[  352.442833][T17331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.442853][T17331] RIP: 0033:0x7f1658f2e929
[  352.442868][T17331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  352.442889][T17331] RSP: 002b:00007f1657597038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  352.442907][T17331] RAX: ffffffffffffffda RBX: 00007f1659155fa0 RCX: 00007f1658f2e929
[  352.442923][T17331] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003
[  352.442934][T17331] RBP: 00007f1657597090 R08: 0000000000000000 R09: 0000000000000000
[  352.442946][T17331] R10: 0000000024002deb R11: 0000000000000246 R12: 0000000000000001
[  352.442958][T17331] R13: 0000000000000000 R14: 00007f1659155fa0 R15: 00007ffe463477e8
[  352.442982][T17331]  </TASK>
[  352.825677][T17336] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4479'.
[  353.437891][T17358] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4487'.
[  353.470789][T17362] rtc_cmos 00:00: Alarms can be up to one day in the future
[  353.514998][T17367] rtc_cmos 00:00: Alarms can be up to one day in the future
[  353.568789][T17371] loop6: detected capacity change from 0 to 256
[  353.584470][T17371] vfat: Unknown parameter 'shortnï€e'
[  353.605422][T17371] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22
[  353.613779][T17371] netdevsim netdevsim6: Direct firmware load for . failed with error -22
[  353.628316][T17371] netlink: 68 bytes leftover after parsing attributes in process `+}[@'.
[  353.701935][T17365] lo speed is unknown, defaulting to 1000
[  353.732145][T17380] loop6: detected capacity change from 0 to 256
[  353.751234][T17380] vfat: Unknown parameter ''
[  353.769208][T17380] loop6: detected capacity change from 0 to 512
[  353.851170][T17381] lo speed is unknown, defaulting to 1000
[  353.886085][T17381] loop7: detected capacity change from 0 to 512
[  353.892791][T17381] EXT4-fs: Ignoring removed bh option
[  353.928665][   T10] rtc_cmos 00:00: Alarms can be up to one day in the future
[  353.936503][   T10] rtc_cmos 00:00: Alarms can be up to one day in the future
[  353.944294][   T10] rtc_cmos 00:00: Alarms can be up to one day in the future
[  353.952128][   T10] rtc_cmos 00:00: Alarms can be up to one day in the future
[  353.959511][   T10] rtc rtc0: __rtc_set_alarm: err=-22
[  353.966261][T17381] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  353.980203][T17381] EXT4-fs (loop7): 1 truncate cleaned up
[  353.987130][T17381] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  354.157613][T17396] loop2: detected capacity change from 0 to 512
[  354.203108][T17398] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4502'.
[  354.279637][T17399] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4501'.
[  355.021822][T17398] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4502'.
[  355.171748][T17401] loop9: detected capacity change from 0 to 512
[  355.274947][T17401] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  355.321513][T17396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  355.340225][T10731] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.355996][T17416] netlink: 'syz.8.4507': attribute type 1 has an invalid length.
[  355.429034][T13528] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.509345][T17422] FAULT_INJECTION: forcing a failure.
[  355.509345][T17422] name failslab, interval 1, probability 0, space 0, times 0
[  355.522157][T17422] CPU: 0 UID: 0 PID: 17422 Comm: syz.6.4509 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) 
[  355.522191][T17422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  355.522250][T17422] Call Trace:
[  355.522259][T17422]  <TASK>
[  355.522269][T17422]  __dump_stack+0x1d/0x30
[  355.522296][T17422]  dump_stack_lvl+0xe8/0x140
[  355.522315][T17422]  dump_stack+0x15/0x1b
[  355.522366][T17422]  should_fail_ex+0x265/0x280
[  355.522475][T17422]  should_failslab+0x8c/0xb0
[  355.522497][T17422]  __kmalloc_noprof+0xa5/0x3e0
[  355.522596][T17422]  ? process_preds+0x323/0x2bb0
[  355.522662][T17422]  process_preds+0x323/0x2bb0
[  355.522687][T17422]  ? terminate_walk+0x27f/0x2a0
[  355.522718][T17422]  ? path_openat+0x1bf8/0x2170
[  355.522757][T17422]  ? avc_has_perm_noaudit+0x1b1/0x200
[  355.522809][T17422]  ? should_fail_ex+0xdb/0x280
[  355.522838][T17422]  ? ftrace_profile_set_filter+0xc2/0x190
[  355.522864][T17422]  ? should_failslab+0x8c/0xb0
[  355.522894][T17422]  ? __kmalloc_cache_noprof+0x189/0x320
[  355.522954][T17422]  ftrace_profile_set_filter+0xff/0x190
[  355.522983][T17422]  perf_ioctl+0x7b3/0x12e0
[  355.523018][T17422]  ? ioctl_has_perm+0x289/0x2a0
[  355.523055][T17422]  ? do_vfs_ioctl+0xd1e/0x11d0
[  355.523094][T17422]  ? selinux_file_ioctl+0x2e3/0x370
[  355.523124][T17422]  ? __fget_files+0x184/0x1c0
[  355.523159][T17422]  ? __pfx_perf_ioctl+0x10/0x10
[  355.523392][T17422]  __se_sys_ioctl+0xce/0x140
[  355.523420][T17422]  __x64_sys_ioctl+0x43/0x50
[  355.523474][T17422]  x64_sys_call+0x19a8/0x2fb0
[  355.523501][T17422]  do_syscall_64+0xd2/0x200
[  355.523579][T17422]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  355.523673][T17422]  ? clear_bhb_loop+0x40/0x90
[  355.523696][T17422]  ? clear_bhb_loop+0x40/0x90
[  355.523717][T17422]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.523738][T17422] RIP: 0033:0x7f3b753ae929
[  355.523793][T17422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  355.523816][T17422] RSP: 002b:00007f3b73a17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  355.523835][T17422] RAX: ffffffffffffffda RBX: 00007f3b755d5fa0 RCX: 00007f3b753ae929
[  355.523847][T17422] RDX: 0000200000000000 RSI: 0000000040082406 RDI: 0000000000000003
[  355.523859][T17422] RBP: 00007f3b73a17090 R08: 0000000000000000 R09: 0000000000000000
[  355.523920][T17422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  355.523935][T17422] R13: 0000000000000000 R14: 00007f3b755d5fa0 R15: 00007ffca91280f8
[  355.523961][T17422]  </TASK>
[  355.794702][T17423] loop8: detected capacity change from 0 to 1024
[  355.812949][T17423] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  355.831596][T17423] netlink: 'syz.8.4510': attribute type 1 has an invalid length.
[  355.839444][T17423] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4510'.
[  355.908191][T12643] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.938261][T17427] smc: net device bond0 applied user defined pnetid SYZ2
[  355.951351][T17427] smc: net device bond0 erased user defined pnetid SYZ2
[  356.039764][T17433] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4508'.
[  356.087343][T17431] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4512'.
[  356.167261][T17431] loop8: detected capacity change from 0 to 512
[  356.243696][T17443] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4513'.
[  356.838830][T17431] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  356.940654][T17449] FAULT_INJECTION: forcing a failure.
[  356.940654][T17449] name failslab, interval 1, probability 0, space 0, times 0
[  356.953383][T17449] CPU: 0 UID: 0 PID: 17449 Comm: syz.9.4515 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) 
[  356.953413][T17449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  356.953426][T17449] Call Trace:
[  356.953432][T17449]  <TASK>
[  356.953440][T17449]  __dump_stack+0x1d/0x30
[  356.953461][T17449]  dump_stack_lvl+0xe8/0x140
[  356.953509][T17449]  dump_stack+0x15/0x1b
[  356.953529][T17449]  should_fail_ex+0x265/0x280
[  356.953561][T17449]  should_failslab+0x8c/0xb0
[  356.953586][T17449]  __kmalloc_noprof+0xa5/0x3e0
[  356.953678][T17449]  ? tracepoint_probe_unregister+0x168/0x650
[  356.953715][T17449]  ? __pfx___bpf_trace_kfree+0x10/0x10
[  356.953751][T17449]  tracepoint_probe_unregister+0x168/0x650
[  356.953831][T17449]  ? __pfx_bpf_link_release+0x10/0x10
[  356.953879][T17449]  bpf_probe_unregister+0x37/0x50
[  356.953946][T17449]  bpf_raw_tp_link_release+0x27/0x50
[  356.953976][T17449]  bpf_link_free+0xab/0x340
[  356.954124][T17449]  ? __pfx_bpf_link_release+0x10/0x10
[  356.954258][T17449]  bpf_link_release+0x45/0x60
[  356.954339][T17449]  __fput+0x298/0x650
[  356.954367][T17449]  ____fput+0x1c/0x30
[  356.954398][T17449]  task_work_run+0x12e/0x1a0
[  356.954430][T17449]  exit_to_user_mode_loop+0xe4/0x100
[  356.954456][T17449]  do_syscall_64+0x1d6/0x200
[  356.954548][T17449]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  356.954575][T17449]  ? clear_bhb_loop+0x40/0x90
[  356.954596][T17449]  ? clear_bhb_loop+0x40/0x90
[  356.954621][T17449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.954663][T17449] RIP: 0033:0x7fb77836e929
[  356.954735][T17449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  356.954753][T17449] RSP: 002b:00007fb7769d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  356.954777][T17449] RAX: 0000000000000000 RBX: 00007fb778595fa0 RCX: 00007fb77836e929
[  356.954836][T17449] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003
[  356.954849][T17449] RBP: 00007fb7769d7090 R08: 0000000000000000 R09: 0000000000000000
[  356.954865][T17449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  356.954879][T17449] R13: 0000000000000000 R14: 00007fb778595fa0 R15: 00007fffd7ff0688
[  356.954906][T17449]  </TASK>
[  356.955113][T17431] EXT4-fs (loop8): orphan cleanup on readonly fs
[  357.256817][   T29] kauditd_printk_skb: 207 callbacks suppressed
[  357.256835][   T29] audit: type=1326 audit(357.717:17892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.9.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77836e929 code=0x7ffc0000
[  357.289046][   T29] audit: type=1326 audit(357.717:17893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.9.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77836e929 code=0x7ffc0000
[  357.312160][   T29] audit: type=1326 audit(357.747:17894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.9.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb77836d290 code=0x7ffc0000
[  357.324958][T17431] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.4512: Block bitmap for bg 0 marked uninitialized
[  357.335165][   T29] audit: type=1326 audit(357.747:17895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.9.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb77836d290 code=0x7ffc0000
[  357.335246][   T29] audit: type=1326 audit(357.747:17896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.9.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77836e929 code=0x7ffc0000
[  357.335396][   T29] audit: type=1326 audit(357.747:17897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.9.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77836e929 code=0x7ffc0000
[  357.335432][   T29] audit: type=1326 audit(357.747:17898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.9.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb77836e929 code=0x7ffc0000
[  357.335467][   T29] audit: type=1400 audit(357.747:17899): avc:  denied  { tracepoint } for  pid=17456 comm="syz.9.4518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  357.372365][T17431] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  357.494202][T17431] EXT4-fs (loop8): 1 orphan inode deleted
[  357.500564][   T29] audit: type=1326 audit(357.747:17900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.9.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77836e929 code=0x7ffc0000
[  357.500619][   T29] audit: type=1326 audit(357.747:17901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.9.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77836e929 code=0x7ffc0000
[  357.585408][T13762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.595916][T17431] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  357.622490][T17472] loop2: detected capacity change from 0 to 128
[  357.648657][T17431] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended
[  357.664026][T17431] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  357.755166][T12643] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.760153][T17486] loop2: detected capacity change from 0 to 512
[  357.772246][T17486] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  357.795075][T17486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  357.892698][T13762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.009924][T17502] __nla_validate_parse: 1 callbacks suppressed
[  358.009944][T17502] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4532'.
[  358.356526][T17507] FAULT_INJECTION: forcing a failure.
[  358.356526][T17507] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  358.369874][T17507] CPU: 1 UID: 0 PID: 17507 Comm: syz.7.4534 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) 
[  358.369911][T17507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  358.369927][T17507] Call Trace:
[  358.369937][T17507]  <TASK>
[  358.369946][T17507]  __dump_stack+0x1d/0x30
[  358.369974][T17507]  dump_stack_lvl+0xe8/0x140
[  358.370046][T17507]  dump_stack+0x15/0x1b
[  358.370068][T17507]  should_fail_ex+0x265/0x280
[  358.370120][T17507]  should_fail_alloc_page+0xf2/0x100
[  358.370146][T17507]  __alloc_frozen_pages_noprof+0xff/0x360
[  358.370183][T17507]  alloc_pages_mpol+0xb3/0x250
[  358.370282][T17507]  vma_alloc_folio_noprof+0x1aa/0x300
[  358.370397][T17507]  handle_mm_fault+0xec2/0x2be0
[  358.370429][T17507]  ? mas_walk+0xf2/0x120
[  358.370483][T17507]  do_user_addr_fault+0x636/0x1090
[  358.370525][T17507]  ? fpregs_assert_state_consistent+0xb4/0xe0
[  358.370593][T17507]  exc_page_fault+0x62/0xa0
[  358.370630][T17507]  asm_exc_page_fault+0x26/0x30
[  358.370686][T17507] RIP: 0033:0x7f75e2cb0ca3
[  358.370702][T17507] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  358.370721][T17507] RSP: 002b:00007f75e14564a0 EFLAGS: 00010206
[  358.370800][T17507] RAX: 0000000000007000 RBX: 00007f75e1456540 RCX: 00007f75d9037000
[  358.370813][T17507] RDX: 00007f75e14566e0 RSI: 0000000000000005 RDI: 00007f75e14565e0
[  358.370825][T17507] RBP: 0000000000000079 R08: 0000000000000008 R09: 000000000000009d
[  358.370836][T17507] R10: 00000000000000c0 R11: 00007f75e1456540 R12: 0000000000000001
[  358.370850][T17507] R13: 00007f75e2e8c120 R14: 0000000000000003 R15: 00007f75e14565e0
[  358.370876][T17507]  </TASK>
[  358.541789][T17507] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  358.575170][T17509] loop8: detected capacity change from 0 to 512
[  358.671853][T17507] loop7: detected capacity change from 0 to 512
[  358.704308][T17509] EXT4-fs: Ignoring removed nomblk_io_submit option
[  358.705446][T17507] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  358.723714][T17509] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  358.741651][T17509] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  358.759940][T10731] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.784404][T17509] EXT4-fs (loop8): 1 truncate cleaned up
[  358.815033][T17509] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  358.907738][T17523] loop7: detected capacity change from 0 to 128
[  359.179388][T12643] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.840743][T17544] rtc_cmos 00:00: Alarms can be up to one day in the future
[  359.864275][T17546] @: renamed from vlan0
[  359.965186][T17554] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4549'.
[  359.975905][T17554] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4549'.
[  360.031314][T17554] loop9: detected capacity change from 0 to 512
[  360.038767][T17553] loop8: detected capacity change from 0 to 512
[  360.048143][T17548] lo speed is unknown, defaulting to 1000
[  360.049008][T17554] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  360.067741][T17547] loop6: detected capacity change from 0 to 128
[  360.074413][T17547] vfat: Unknown parameter 'M0xffffffffffffffff'
[  360.080864][T17553] EXT4-fs error (device loop8): ext4_orphan_get:1419: comm syz.8.4540: bad orphan inode 64
[  360.112807][T17553] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  360.129959][T13528] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.132012][T17563] loop7: detected capacity change from 0 to 512
[  360.168649][T12643] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.186522][T17563] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  360.195130][T17566] loop9: detected capacity change from 0 to 512
[  360.206896][T17570] loop8: detected capacity change from 0 to 164
[  360.208778][T17563] EXT4-fs (loop7): orphan cleanup on readonly fs
[  360.223899][T17572] FAULT_INJECTION: forcing a failure.
[  360.223899][T17572] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  360.231324][T17563] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  360.237163][T17572] CPU: 0 UID: 0 PID: 17572 Comm: syz.2.4553 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) 
[  360.237202][T17572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  360.237221][T17572] Call Trace:
[  360.237233][T17572]  <TASK>
[  360.237244][T17572]  __dump_stack+0x1d/0x30
[  360.237344][T17572]  dump_stack_lvl+0xe8/0x140
[  360.237370][T17572]  dump_stack+0x15/0x1b
[  360.237394][T17572]  should_fail_ex+0x265/0x280
[  360.237479][T17572]  should_fail+0xb/0x20
[  360.237517][T17572]  should_fail_usercopy+0x1a/0x20
[  360.237577][T17572]  _copy_from_user+0x1c/0xb0
[  360.237606][T17572]  generic_map_update_batch+0x370/0x540
[  360.237703][T17572]  ? __pfx_generic_map_update_batch+0x10/0x10
[  360.237739][T17572]  bpf_map_do_batch+0x258/0x380
[  360.237768][T17572]  __sys_bpf+0x2e0/0x790
[  360.237832][T17572]  __x64_sys_bpf+0x41/0x50
[  360.237920][T17572]  x64_sys_call+0x2478/0x2fb0
[  360.237949][T17572]  do_syscall_64+0xd2/0x200
[  360.237975][T17572]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  360.238035][T17572]  ? clear_bhb_loop+0x40/0x90
[  360.238064][T17572]  ? clear_bhb_loop+0x40/0x90
[  360.238173][T17572]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.238201][T17572] RIP: 0033:0x7f1658f2e929
[  360.238222][T17572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  360.238248][T17572] RSP: 002b:00007f1657597038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  360.238275][T17572] RAX: ffffffffffffffda RBX: 00007f1659155fa0 RCX: 00007f1658f2e929
[  360.238332][T17572] RDX: 0000000000000038 RSI: 00002000000007c0 RDI: 000000000000001a
[  360.238407][T17572] RBP: 00007f1657597090 R08: 0000000000000000 R09: 0000000000000000
[  360.238424][T17572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  360.238441][T17572] R13: 0000000000000000 R14: 00007f1659155fa0 R15: 00007ffe463477e8
[  360.238469][T17572]  </TASK>
[  360.450842][T17566] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  360.459329][T17566] EXT4-fs (loop9): orphan cleanup on readonly fs
[  360.465930][T17566] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  360.469971][T17570] bio_check_eod: 56 callbacks suppressed
[  360.469990][T17570] syz.8.4552: attempt to access beyond end of device
[  360.469990][T17570] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  360.493523][T17566] EXT4-fs (loop9): Cannot turn on quotas: error -117
[  360.512861][T17566] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4550: bg 0: block 40: padding at end of block bitmap is not set
[  360.519426][T17570] syz.8.4552: attempt to access beyond end of device
[  360.519426][T17570] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164
[  360.528687][T17566] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  360.541151][T17563] EXT4-fs (loop7): Cannot turn on quotas: error -117
[  360.569128][T17563] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4551: bg 0: block 40: padding at end of block bitmap is not set
[  360.586215][T17563] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  360.595882][T17563] EXT4-fs (loop7): 1 truncate cleaned up
[  360.607759][T17566] EXT4-fs (loop9): 1 truncate cleaned up
[  360.646158][T17566] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  360.658969][T17563] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  360.675461][T17578] tmpfs: Unknown parameter 'contextùQ|!‡v½óv½Ã['
[  360.718650][T17580] bridge_slave_0: left allmulticast mode
[  360.724426][T17580] bridge_slave_0: left promiscuous mode
[  360.730297][T17580] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.748067][T13528] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.760142][T17580] bridge_slave_1: left allmulticast mode
[  360.765837][T17580] bridge_slave_1: left promiscuous mode
[  360.771683][T17580] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.782530][T10731] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.796991][T17580] bond0: (slave bond_slave_0): Releasing backup interface
[  360.816994][   T10] rtc_cmos 00:00: Alarms can be up to one day in the future
[  360.824893][   T10] rtc_cmos 00:00: Alarms can be up to one day in the future
[  360.832786][   T10] rtc_cmos 00:00: Alarms can be up to one day in the future
[  360.840524][   T10] rtc_cmos 00:00: Alarms can be up to one day in the future
[  360.844106][T17585] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4558'.
[  360.847825][   T10] rtc rtc0: __rtc_set_alarm: err=-22
[  360.875740][T17580] bond0: (slave bond_slave_1): Releasing backup interface
[  360.898578][T17580] team0: Port device team_slave_0 removed
[  360.932760][T17580] team0: Port device team_slave_1 removed
[  360.957373][T17580] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  360.965018][T17580] batman_adv: batadv0: Removing interface: batadv_slave_0
[  360.991878][T17588] rtc_cmos 00:00: Alarms can be up to one day in the future
[  361.022161][T17580] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  361.029677][T17580] batman_adv: batadv0: Removing interface: batadv_slave_1
[  361.128696][T17590] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4560'.
[  361.175470][T17591] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4560'.
[  361.238639][T17590] loop7: detected capacity change from 0 to 512
[  361.254476][T17598] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4561'.
[  361.283431][T17590] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  361.301152][T17595] wg2: left promiscuous mode
[  361.305820][T17595] wg2: left allmulticast mode
[  361.313646][T17595] wg2: entered promiscuous mode
[  361.318555][T17595] wg2: entered allmulticast mode
[  361.341618][T10731] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  361.356340][T17604] smc: net device bond0 applied user defined pnetid SYZ2
[  361.370813][T17604] smc: net device bond0 erased user defined pnetid SYZ2
[  361.501073][T17617] loop8: detected capacity change from 0 to 512
[  361.530723][T17617] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  361.553871][T17617] EXT4-fs (loop8): orphan cleanup on readonly fs
[  361.562808][T17617] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  361.580441][T17617] EXT4-fs (loop8): Cannot turn on quotas: error -117
[  361.589493][T17617] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4568: bg 0: block 40: padding at end of block bitmap is not set
[  361.669399][T17617] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  361.710834][T17617] EXT4-fs (loop8): 1 truncate cleaned up
[  361.717050][T17617] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  361.744077][T17626] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4570'.
[  361.781174][T12643] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  361.804406][T17626] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4570'.
[  361.816907][   T10] rtc_cmos 00:00: Alarms can be up to one day in the future
[  361.824748][   T10] rtc_cmos 00:00: Alarms can be up to one day in the future
[  361.832464][   T10] rtc_cmos 00:00: Alarms can be up to one day in the future
[  361.840183][   T10] rtc_cmos 00:00: Alarms can be up to one day in the future
[  361.847561][   T10] rtc rtc0: __rtc_set_alarm: err=-22
[  361.882230][T17631] loop9: detected capacity change from 0 to 512
[  361.914616][T17631] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  361.968657][T13528] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.000204][T17640] lo speed is unknown, defaulting to 1000
[  362.005996][T17640] lo speed is unknown, defaulting to 1000
[  362.028166][T17640] lo speed is unknown, defaulting to 1000
[  362.040033][T17640] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  362.073441][T17647] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4575'.
[  362.083243][T17640] lo speed is unknown, defaulting to 1000
[  362.099229][T17640] lo speed is unknown, defaulting to 1000
[  362.109245][T17640] lo speed is unknown, defaulting to 1000
[  362.126881][T17640] lo speed is unknown, defaulting to 1000
[  362.136054][T17640] lo speed is unknown, defaulting to 1000
[  362.159992][T17651] loop9: detected capacity change from 0 to 512
[  362.196402][T17651] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  362.234393][T17655] loop7: detected capacity change from 0 to 512
[  362.257380][T17655] EXT4-fs (loop7): orphan cleanup on readonly fs
[  362.264137][T17655] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13
[  362.274321][   T29] kauditd_printk_skb: 159 callbacks suppressed
[  362.274339][   T29] audit: type=1400 audit(362.739:18058): avc:  denied  { getopt } for  pid=17657 comm="syz.8.4577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  362.301689][T13528] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.302036][T17655] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  362.327475][T17655] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.4576: attempt to clear invalid blocks 2 len 1
[  362.331189][   T29] audit: type=1400 audit(362.789:18059): avc:  denied  { mounton } for  pid=17657 comm="syz.8.4577" path="/300/bus" dev="tmpfs" ino=1613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  362.367542][T17615] netdevsim netdevsim2: Direct firmware load for ÈöníñÆgkNšÄq>ä*x(Oˆ@ failed with error -2
[  362.369670][T17659] loop8: detected capacity change from 0 to 16384
[  362.387845][T17655] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.4576: invalid indirect mapped block 1819239214 (level 0)
[  362.420439][T17662] smc: net device bond0 applied user defined pnetid SYZ2
[  362.435397][T17655] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.4576: invalid indirect mapped block 1819239214 (level 1)
[  362.452854][T17662] smc: net device bond0 erased user defined pnetid SYZ2
[  362.471746][T17655] EXT4-fs (loop7): 1 truncate cleaned up
[  362.492552][T17655] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  362.505567][T17663] loop8: detected capacity change from 16384 to 16383
[  362.516403][T17670] smc: net device bond0 applied user defined pnetid SYZ2
[  362.524572][T17670] smc: net device bond0 erased user defined pnetid SYZ2
[  362.603368][   T29] audit: type=1400 audit(363.069:18060): avc:  denied  { connect } for  pid=17652 comm="syz.7.4576" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  362.654132][T10731] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.660324][   T29] audit: type=1326 audit(363.099:18061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17679 comm="syz.2.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1658f2e929 code=0x7ffc0000
[  362.686367][   T29] audit: type=1326 audit(363.099:18062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17679 comm="syz.2.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1658f2e929 code=0x7ffc0000
[  362.709548][   T29] audit: type=1326 audit(363.099:18063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17679 comm="syz.2.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1658f2e929 code=0x7ffc0000
[  362.732817][   T29] audit: type=1326 audit(363.099:18064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17679 comm="syz.2.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1658f2e929 code=0x7ffc0000
[  362.755941][   T29] audit: type=1326 audit(363.099:18065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17679 comm="syz.2.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1658f2e929 code=0x7ffc0000
[  362.779079][   T29] audit: type=1326 audit(363.099:18066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17679 comm="syz.2.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1658f2e929 code=0x7ffc0000
[  362.802100][   T29] audit: type=1326 audit(363.099:18067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17679 comm="syz.2.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1658f2e929 code=0x7ffc0000
[  362.840494][T17683] tipc: Started in network mode
[  362.845504][T17683] tipc: Node identity e0000002, cluster identity 4711
[  362.852380][T17683] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  362.890750][T17684] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0
[  362.952213][T17698] dummy0: entered allmulticast mode
[  362.965561][T17697] dummy0: left allmulticast mode
[  363.003113][T17704] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  363.058891][T17713] netlink: 'syz.8.4595': attribute type 21 has an invalid length.
[  363.066921][T17713] __nla_validate_parse: 2 callbacks suppressed
[  363.066948][T17713] netlink: 156 bytes leftover after parsing attributes in process `syz.8.4595'.
[  363.128036][T17717] loop7: detected capacity change from 0 to 1024
[  363.143933][T17717] EXT4-fs: Ignoring removed nobh option
[  363.149734][T17717] EXT4-fs: Ignoring removed bh option
[  363.166164][T17717] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  363.240506][T17730] xt_HMARK: spi-set and port-set can't be combined
[  363.397543][T17717] netlink: 'syz.7.4593': attribute type 1 has an invalid length.
[  363.442195][T17717] 8021q: adding VLAN 0 to HW filter on device bond1
[  363.468500][T17733] bond1: (slave gretap1): making interface the new active one
[  363.479142][T17733] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  363.484150][T17748] loop9: detected capacity change from 0 to 256
[  363.519194][T17748] vfat: Unknown parameter 'shortnï€e'
[  363.531306][T17748] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22
[  363.539687][T17748] netdevsim netdevsim9: Direct firmware load for . failed with error -22
[  363.572161][T17748] netlink: 68 bytes leftover after parsing attributes in process `+}[@'.
[  363.694150][T17708] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.4593: Allocating blocks 497-513 which overlap fs metadata
[  363.779968][    T9] IPVS: starting estimator thread 0...
[  363.888182][T17761] IPVS: using max 2352 ests per chain, 117600 per kthread
[  363.987293][T17760] lo speed is unknown, defaulting to 1000
[  364.032270][T17760] lo speed is unknown, defaulting to 1000
[  364.160579][T17774] netlink: 'syz.9.4613': attribute type 4 has an invalid length.
[  364.232067][T17777] netlink: 'syz.9.4613': attribute type 4 has an invalid length.
[  364.242670][    T9] lo speed is unknown, defaulting to 1000
[  364.248538][    T9] syz0: Port: 1 Link DOWN
[  364.278824][    T9] lo speed is unknown, defaulting to 1000
[  364.284639][    T9] syz0: Port: 1 Link ACTIVE
[  364.360666][T17779] loop2: detected capacity change from 0 to 512
[  364.399835][T17779] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  364.427047][T17779] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  364.440559][T17781] dvmrp1: entered allmulticast mode
[  364.461251][T17781] dvmrp1: left allmulticast mode
[  364.469903][T17708] EXT4-fs (loop7): pa ffff888100619af0: logic 560, phys. 433, len 5
[  364.477992][T17708] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  364.495122][T10731] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.535579][T17785] netlink: 'syz.2.4618': attribute type 4 has an invalid length.
[  364.678448][T17791] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4621'.
[  364.712153][T17791] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17791 comm=syz.2.4621
[  364.743119][T17791] FAULT_INJECTION: forcing a failure.
[  364.743119][T17791] name failslab, interval 1, probability 0, space 0, times 0
[  364.755844][T17791] CPU: 1 UID: 0 PID: 17791 Comm: syz.2.4621 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) 
[  364.755873][T17791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  364.755915][T17791] Call Trace:
[  364.755924][T17791]  <TASK>
[  364.755934][T17791]  __dump_stack+0x1d/0x30
[  364.755961][T17791]  dump_stack_lvl+0xe8/0x140
[  364.755987][T17791]  dump_stack+0x15/0x1b
[  364.756013][T17791]  should_fail_ex+0x265/0x280
[  364.756045][T17791]  ? tcf_exts_init_ex+0x143/0x340
[  364.756083][T17791]  should_failslab+0x8c/0xb0
[  364.756114][T17791]  __kmalloc_cache_noprof+0x4c/0x320
[  364.756160][T17791]  tcf_exts_init_ex+0x143/0x340
[  364.756235][T17791]  fl_change+0x3d9/0xfc0
[  364.756284][T17791]  ? __pfx_fl_change+0x10/0x10
[  364.756315][T17791]  tc_new_tfilter+0xde1/0x10a0
[  364.756421][T17791]  ? __pfx_tc_new_tfilter+0x10/0x10
[  364.756444][T17791]  rtnetlink_rcv_msg+0x5fb/0x6d0
[  364.756468][T17791]  ? avc_has_perm_noaudit+0x1b1/0x200
[  364.756499][T17791]  netlink_rcv_skb+0x120/0x220
[  364.756593][T17791]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  364.756663][T17791]  rtnetlink_rcv+0x1c/0x30
[  364.756747][T17791]  netlink_unicast+0x5a1/0x670
[  364.756800][T17791]  netlink_sendmsg+0x58b/0x6b0
[  364.756829][T17791]  ? __pfx_netlink_sendmsg+0x10/0x10
[  364.756894][T17791]  __sock_sendmsg+0x142/0x180
[  364.756919][T17791]  ____sys_sendmsg+0x31e/0x4e0
[  364.756961][T17791]  ___sys_sendmsg+0x17b/0x1d0
[  364.757059][T17791]  __x64_sys_sendmsg+0xd4/0x160
[  364.757096][T17791]  x64_sys_call+0x2999/0x2fb0
[  364.757138][T17791]  do_syscall_64+0xd2/0x200
[  364.757158][T17791]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  364.757192][T17791]  ? clear_bhb_loop+0x40/0x90
[  364.757286][T17791]  ? clear_bhb_loop+0x40/0x90
[  364.757315][T17791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.757342][T17791] RIP: 0033:0x7f1658f2e929
[  364.757361][T17791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  364.757402][T17791] RSP: 002b:00007f1657597038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  364.757426][T17791] RAX: ffffffffffffffda RBX: 00007f1659155fa0 RCX: 00007f1658f2e929
[  364.757442][T17791] RDX: 0000000000004010 RSI: 0000200000000280 RDI: 0000000000000005
[  364.757458][T17791] RBP: 00007f1657597090 R08: 0000000000000000 R09: 0000000000000000
[  364.757473][T17791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  364.757489][T17791] R13: 0000000000000000 R14: 00007f1659155fa0 R15: 00007ffe463477e8
[  364.757515][T17791]  </TASK>
[  365.012934][T17795] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4617'.
[  365.023863][T17795] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4617'.
[  365.059197][T17795] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17795 comm=syz.7.4617
[  365.203208][T17798] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4623'.
[  365.254598][T17801] netlink: 160 bytes leftover after parsing attributes in process `syz.6.4624'.
[  365.297142][T17801] loop6: detected capacity change from 0 to 1024
[  365.306834][T17801] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  365.317872][T17801] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  365.329517][T17801] JBD2: no valid journal superblock found
[  365.335297][T17801] EXT4-fs (loop6): Could not load journal inode
[  365.432402][T17805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4626'.
[  365.451863][T17805] loop2: detected capacity change from 0 to 512
[  365.475311][T17805] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  365.489812][T17805] EXT4-fs (loop2): 1 truncate cleaned up
[  365.496105][T17805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  365.599832][T17814] netlink: 'syz.8.4629': attribute type 3 has an invalid length.
[  365.678385][T17819] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4631'.
[  365.791334][T17828] loop8: detected capacity change from 0 to 128
[  365.843561][T13762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.935066][T17828] FAT-fs (loop8): Directory bread(block 32) failed
[  365.941994][T17828] FAT-fs (loop8): Directory bread(block 33) failed
[  365.948698][T17828] FAT-fs (loop8): Directory bread(block 34) failed
[  365.955311][T17828] FAT-fs (loop8): Directory bread(block 35) failed
[  365.962245][T17828] FAT-fs (loop8): Directory bread(block 36) failed
[  365.968827][T17828] FAT-fs (loop8): Directory bread(block 37) failed
[  365.975445][T17828] FAT-fs (loop8): Directory bread(block 38) failed
[  365.982124][T17828] FAT-fs (loop8): Directory bread(block 39) failed
[  365.989677][T17828] FAT-fs (loop8): Directory bread(block 40) failed
[  365.996242][T17828] FAT-fs (loop8): Directory bread(block 41) failed
[  366.163219][T17834] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4637'.
[  366.246126][T17840] loop2: detected capacity change from 0 to 512
[  366.296364][T17840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  366.391912][T13762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  366.715974][T17856] loop2: detected capacity change from 0 to 164
[  366.729107][T17856] isofs_fill_super: bread failed, dev=loop2, iso_blknum=41, block=164
[  367.743956][   T29] kauditd_printk_skb: 370 callbacks suppressed
[  367.743975][   T29] audit: type=1400 audit(368.201:18438): avc:  denied  { create } for  pid=17866 comm="syz.8.4646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  367.774688][   T29] audit: type=1400 audit(368.231:18439): avc:  denied  { bind } for  pid=17866 comm="syz.8.4646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  367.793852][   T29] audit: type=1400 audit(368.231:18440): avc:  denied  { node_bind } for  pid=17866 comm="syz.8.4646" saddr=172.20.20.13 src=52768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  367.815947][   T29] audit: type=1400 audit(368.231:18441): avc:  denied  { listen } for  pid=17866 comm="syz.8.4646" laddr=172.20.20.54 lport=52768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  367.916230][   T29] audit: type=1400 audit(368.371:18442): avc:  denied  { name_bind } for  pid=17874 comm="syz.7.4648" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  367.937651][   T29] audit: type=1400 audit(368.371:18443): avc:  denied  { node_bind } for  pid=17874 comm="syz.7.4648" saddr=::ffff:172.20.20.170 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  368.052929][   T29] audit: type=1400 audit(368.481:18444): avc:  denied  { allowed } for  pid=17875 comm="syz.9.4649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  368.072137][   T29] audit: type=1400 audit(368.481:18445): avc:  denied  { create } for  pid=17875 comm="syz.9.4649" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  368.093415][   T29] audit: type=1400 audit(368.481:18446): avc:  denied  { map } for  pid=17875 comm="syz.9.4649" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=56488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  368.105421][T17882] loop6: detected capacity change from 0 to 512
[  368.117807][   T29] audit: type=1400 audit(368.481:18447): avc:  denied  { read write } for  pid=17875 comm="syz.9.4649" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=56488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  368.128228][T17884] FAULT_INJECTION: forcing a failure.
[  368.128228][T17884] name failslab, interval 1, probability 0, space 0, times 0
[  368.160796][T17884] CPU: 0 UID: 0 PID: 17884 Comm: syz.2.4651 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) 
[  368.160834][T17884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  368.160851][T17884] Call Trace:
[  368.160859][T17884]  <TASK>
[  368.160940][T17884]  __dump_stack+0x1d/0x30
[  368.160967][T17884]  dump_stack_lvl+0xe8/0x140
[  368.160992][T17884]  dump_stack+0x15/0x1b
[  368.161017][T17884]  should_fail_ex+0x265/0x280
[  368.161056][T17884]  should_failslab+0x8c/0xb0
[  368.161084][T17884]  __kvmalloc_node_noprof+0x123/0x4e0
[  368.161138][T17884]  ? io_alloc_cache_init+0x31/0xa0
[  368.161165][T17884]  ? io_alloc_cache_init+0x3c/0xa0
[  368.161222][T17884]  io_alloc_cache_init+0x31/0xa0
[  368.161242][T17884]  io_ring_ctx_alloc+0x2f6/0x6a0
[  368.161276][T17884]  io_uring_create+0x10f/0x610
[  368.161308][T17884]  __se_sys_io_uring_setup+0x1f7/0x210
[  368.161430][T17884]  __x64_sys_io_uring_setup+0x31/0x40
[  368.161469][T17884]  x64_sys_call+0x184b/0x2fb0
[  368.161556][T17884]  do_syscall_64+0xd2/0x200
[  368.161576][T17884]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  368.161603][T17884]  ? clear_bhb_loop+0x40/0x90
[  368.161723][T17884]  ? clear_bhb_loop+0x40/0x90
[  368.161745][T17884]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.161889][T17884] RIP: 0033:0x7f1658f2e929
[  368.161905][T17884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  368.161924][T17884] RSP: 002b:00007f1657596fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[  368.161961][T17884] RAX: ffffffffffffffda RBX: 00007f1659155fa0 RCX: 00007f1658f2e929
[  368.161973][T17884] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000002c0c
[  368.161985][T17884] RBP: 0000200000000400 R08: 0000000000000000 R09: 0000000000000000
[  368.161998][T17884] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[  368.162009][T17884] R13: 0000000000000000 R14: 0000000000002c0c R15: 0000000000000000
[  368.162028][T17884]  </TASK>
[  368.408345][T17889] loop9: detected capacity change from 0 to 1024
[  368.420580][T17889] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  368.434898][T17882] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  368.473512][T17060] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.509285][T17888] loop8: detected capacity change from 0 to 512
[  368.522842][T17888] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  368.538744][T17888] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  368.556300][T17888] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.4654: corrupted xattr block 19: overlapping e_value 
[  368.573251][T17906] vhci_hcd: invalid port number 96
[  368.578466][T17906] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  368.614982][T17888] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=15
[  368.630056][T17909] __nla_validate_parse: 4 callbacks suppressed
[  368.630075][T17909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4656'.
[  368.649541][T17888] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.4654: corrupted xattr block 19: overlapping e_value 
[  368.663653][T17888] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=15
[  368.674476][T17888] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.4654: corrupted xattr block 19: overlapping e_value 
[  368.690440][T17900] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.4654: corrupted xattr block 19: overlapping e_value 
[  368.709462][T17900] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop8 ino=15
[  368.861112][T17911] loop6: detected capacity change from 0 to 512
[  368.889691][T17911] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  368.899823][T17911] EXT4-fs (loop6): orphan cleanup on readonly fs
[  368.906842][T17911] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  368.923079][T17911] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  368.930868][T17911] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4659: bg 0: block 40: padding at end of block bitmap is not set
[  368.948661][T17911] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  368.958725][T17911] EXT4-fs (loop6): 1 truncate cleaned up
[  369.150579][T17915] loop8: detected capacity change from 0 to 512
[  369.324750][T17928] smc: net device bond0 applied user defined pnetid SYZ2
[  369.333437][T17928] smc: net device bond0 erased user defined pnetid SYZ2
[  369.403990][T17933] loop2: detected capacity change from 0 to 512
[  369.413907][T17933] EXT4-fs (loop2): fragment/cluster size (131072) != block size (4096)
[  369.504170][T17939] loop2: detected capacity change from 0 to 2048
[  370.019687][T17946] lo speed is unknown, defaulting to 1000
[  370.026175][T17946] lo speed is unknown, defaulting to 1000
[  370.194845][T17926] lo speed is unknown, defaulting to 1000
[  370.225450][T17950] netlink: 'syz.6.4670': attribute type 3 has an invalid length.
[  370.242855][T17926] lo speed is unknown, defaulting to 1000
[  370.663366][T17952] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  370.768830][T17949] tipc: Resetting bearer <eth:syzkaller0>
[  370.790152][T13762] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  370.793032][T17949] tipc: Disabling bearer <eth:syzkaller0>
[  370.805844][T13762] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  370.812560][T17954] FAULT_INJECTION: forcing a failure.
[  370.812560][T17954] name failslab, interval 1, probability 0, space 0, times 0
[  370.832085][T17954] CPU: 1 UID: 0 PID: 17954 Comm: syz.9.4671 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) 
[  370.832202][T17954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  370.832251][T17954] Call Trace:
[  370.832260][T17954]  <TASK>
[  370.832269][T17954]  __dump_stack+0x1d/0x30
[  370.832290][T17954]  dump_stack_lvl+0xe8/0x140
[  370.832310][T17954]  dump_stack+0x15/0x1b
[  370.832353][T17954]  should_fail_ex+0x265/0x280
[  370.832394][T17954]  should_failslab+0x8c/0xb0
[  370.832451][T17954]  __kmalloc_noprof+0xa5/0x3e0
[  370.832478][T17954]  ? usb_hcd_submit_urb+0x5d3/0x1200
[  370.832608][T17954]  usb_hcd_submit_urb+0x5d3/0x1200
[  370.832646][T17954]  usb_submit_urb+0xb14/0xc10
[  370.832666][T17954]  usb_start_wait_urb+0x8c/0x190
[  370.832725][T17954]  usb_control_msg+0x18f/0x250
[  370.832789][T17954]  hub_suspend+0x4b8/0x580
[  370.832815][T17954]  usb_suspend_both+0x16c/0x9a0
[  370.832842][T17954]  ? __pfx_usb_runtime_suspend+0x10/0x10
[  370.832886][T17954]  usb_runtime_suspend+0x4a/0xe0
[  370.832912][T17954]  __rpm_callback+0x2a8/0x6e0
[  370.833009][T17954]  ? __update_runtime_status+0xe8/0x1c0
[  370.833031][T17954]  ? __pfx_usb_runtime_suspend+0x10/0x10
[  370.833056][T17954]  rpm_suspend+0x6f5/0x1020
[  370.833143][T17954]  ? ioctl_has_perm+0x257/0x2a0
[  370.833167][T17954]  __pm_runtime_suspend+0xed/0x1f0
[  370.833222][T17954]  usb_autosuspend_device+0x3e/0x50
[  370.833372][T17954]  proc_allow_suspend+0x9f/0xc0
[  370.833389][T17954]  usbdev_ioctl+0xba7/0x1710
[  370.833417][T17954]  ? __pfx_usbdev_ioctl+0x10/0x10
[  370.833549][T17954]  __se_sys_ioctl+0xce/0x140
[  370.833576][T17954]  __x64_sys_ioctl+0x43/0x50
[  370.833601][T17954]  x64_sys_call+0x19a8/0x2fb0
[  370.833620][T17954]  do_syscall_64+0xd2/0x200
[  370.833636][T17954]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  370.833670][T17954]  ? clear_bhb_loop+0x40/0x90
[  370.833689][T17954]  ? clear_bhb_loop+0x40/0x90
[  370.833709][T17954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.833727][T17954] RIP: 0033:0x7fb77836e929
[  370.833774][T17954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  370.833797][T17954] RSP: 002b:00007fb7769d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  370.833814][T17954] RAX: ffffffffffffffda RBX: 00007fb778595fa0 RCX: 00007fb77836e929
[  370.833824][T17954] RDX: 0000000000000000 RSI: 0000000000005522 RDI: 0000000000000005
[  370.833835][T17954] RBP: 00007fb7769d7090 R08: 0000000000000000 R09: 0000000000000000
[  370.833923][T17954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  370.833934][T17954] R13: 0000000000000000 R14: 00007fb778595fa0 R15: 00007fffd7ff0688
[  370.833953][T17954]  </TASK>
[  371.195692][T17947] lo speed is unknown, defaulting to 1000
[  371.213598][T17958] ip6erspan0: entered allmulticast mode
[  371.260758][T17965] Unknown options in mask 5
[  371.344384][T17947] lo speed is unknown, defaulting to 1000
[  371.500428][T17984] loop6: detected capacity change from 0 to 256
[  371.548511][T17984] vfat: Unknown parameter 'shortnï€e'
[  371.573514][T17984] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22
[  371.582050][T17984] netdevsim netdevsim6: Direct firmware load for . failed with error -22
[  371.597898][T17984] netlink: 68 bytes leftover after parsing attributes in process `+}[@'.
[  371.647736][T17992] smc: net device bond0 applied user defined pnetid SYZ2
[  371.655203][T17992] smc: net device bond0 erased user defined pnetid SYZ2
[  371.709088][T17996] netlink: 'syz.7.4688': attribute type 10 has an invalid length.
[  371.727412][T17998] FAULT_INJECTION: forcing a failure.
[  371.727412][T17998] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  371.740767][T17998] CPU: 0 UID: 0 PID: 17998 Comm: syz.6.4689 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) 
[  371.740835][T17998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  371.740852][T17998] Call Trace:
[  371.740860][T17998]  <TASK>
[  371.740869][T17998]  __dump_stack+0x1d/0x30
[  371.740895][T17998]  dump_stack_lvl+0xe8/0x140
[  371.740968][T17998]  dump_stack+0x15/0x1b
[  371.740990][T17998]  should_fail_ex+0x265/0x280
[  371.741041][T17998]  should_fail_alloc_page+0xf2/0x100
[  371.741111][T17998]  __alloc_frozen_pages_noprof+0xff/0x360
[  371.741232][T17998]  alloc_pages_mpol+0xb3/0x250
[  371.741303][T17998]  vma_alloc_folio_noprof+0x1aa/0x300
[  371.741347][T17998]  handle_mm_fault+0xec2/0x2be0
[  371.741378][T17998]  ? mas_walk+0xf2/0x120
[  371.741480][T17998]  do_user_addr_fault+0x636/0x1090
[  371.741520][T17998]  ? fpregs_assert_state_consistent+0xb4/0xe0
[  371.741563][T17998]  exc_page_fault+0x62/0xa0
[  371.741672][T17998]  asm_exc_page_fault+0x26/0x30
[  371.741698][T17998] RIP: 0033:0x7f3b75270ca3
[  371.741737][T17998] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  371.741787][T17998] RSP: 002b:00007f3b73a164a0 EFLAGS: 00010202
[  371.741807][T17998] RAX: 0000000000003000 RBX: 00007f3b73a16540 RCX: 00007f3b6b5f7000
[  371.741872][T17998] RDX: 00007f3b73a166e0 RSI: 0000000000000000 RDI: 00007f3b73a165e0
[  371.741889][T17998] RBP: 00000000000000d9 R08: 0000000000000007 R09: 000000000000003c
[  371.741905][T17998] R10: 000000000000004e R11: 00007f3b73a16540 R12: 0000000000000001
[  371.741931][T17998] R13: 00007f3b7544c120 R14: 0000000000000002 R15: 00007f3b73a165e0
[  371.741953][T17998]  </TASK>
[  371.741968][T17998] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  371.855074][T17999] netlink: 'syz.7.4688': attribute type 10 has an invalid length.
[  371.872497][T17998] loop6: detected capacity change from 0 to 512
[  371.937448][T17996] team0: Port device dummy0 added
[  371.945067][T17999] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  371.960280][T17999] team0: Failed to send options change via netlink (err -105)
[  371.968343][T17999] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  371.979089][T17999] team0: Port device dummy0 removed
[  371.995714][T17999] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  372.030516][T18007] binfmt_misc: register: failed to install interpreter file ./file0
[  372.077783][T18007] syzkaller0: entered promiscuous mode
[  372.083338][T18007] syzkaller0: entered allmulticast mode
[  372.093449][T18007] loop6: detected capacity change from 0 to 128
[  372.101286][T18007] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  372.134635][T18011] netlink: 'syz.7.4691': attribute type 27 has an invalid length.
[  372.288390][T18022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4693'.
[  372.317883][T18025] SELinux: syz.6.4696 (18025) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  372.364094][T18026] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=38656 sclass=netlink_audit_socket pid=18026 comm=syz.2.4693
[  372.449672][T18011] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  372.521484][T18011] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  372.578834][T18011] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.587525][T18011] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.596004][T18011] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.604444][T18011] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.616823][T18011] bridge1: left promiscuous mode
[  372.621836][T18011] bridge1: left allmulticast mode
[  372.629498][T18011] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.637930][T18011] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.646364][T18011] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.654828][T18011] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.664690][T18011] vxlan0: left promiscuous mode
[  372.694967][T18009] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.704574][T18009] 8021q: adding VLAN 0 to HW filter on device team0
[  372.714958][T18009] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  372.743103][T18025] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.795437][T18025] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.851948][T18030] lo speed is unknown, defaulting to 1000
[  372.859904][T18030] lo speed is unknown, defaulting to 1000
[  372.892840][T18025] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.943639][T18036] loop7: detected capacity change from 0 to 1024
[  372.956464][T18025] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.970656][T18036] EXT4-fs: Ignoring removed mblk_io_submit option
[  372.977456][T18036] EXT4-fs: Ignoring removed nobh option
[  372.983148][T18036] EXT4-fs: Ignoring removed bh option
[  373.042942][T18025] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.057881][T18025] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.072606][T18025] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.099463][T18025] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.117631][T18040] loop8: detected capacity change from 0 to 512
[  373.148499][T18040] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  373.158372][T18040] EXT4-fs (loop8): orphan cleanup on readonly fs
[  373.165369][T18040] __quota_error: 307 callbacks suppressed
[  373.165386][T18040] Quota error (device loop8): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  373.183848][T18040] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  373.203333][T18040] EXT4-fs (loop8): Cannot turn on quotas: error -117
[  373.264574][T18040] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4699: bg 0: block 40: padding at end of block bitmap is not set
[  373.297196][T18040] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  373.317036][T18047] loop6: detected capacity change from 0 to 512
[  373.326472][   T29] audit: type=1400 audit(373.792:18754): avc:  denied  { mounton } for  pid=18035 comm="syz.7.4698" path="/419/file1/file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  373.352178][T18040] EXT4-fs (loop8): 1 truncate cleaned up
[  373.388317][   T29] audit: type=1400 audit(373.852:18755): avc:  denied  { read } for  pid=18050 comm="syz.6.4702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  373.454688][   T29] audit: type=1400 audit(373.912:18756): avc:  denied  { read } for  pid=18056 comm="syz.7.4704" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  373.477466][   T29] audit: type=1400 audit(373.912:18757): avc:  denied  { open } for  pid=18056 comm="syz.7.4704" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  373.512580][   T29] audit: type=1400 audit(373.972:18758): avc:  denied  { ioctl } for  pid=18056 comm="syz.7.4704" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  373.528058][T18060] loop9: detected capacity change from 0 to 1024
[  373.542143][T18057] rtc_cmos 00:00: Alarms can be up to one day in the future
[  373.544662][T18060] EXT4-fs: Ignoring removed nomblk_io_submit option
[  373.572678][   T29] audit: type=1326 audit(374.032:18759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18059 comm="syz.9.4706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77836e929 code=0x7ffc0000
[  373.596160][   T29] audit: type=1326 audit(374.032:18760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18059 comm="syz.9.4706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb77836e929 code=0x7ffc0000
[  373.619351][   T29] audit: type=1326 audit(374.032:18761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18059 comm="syz.9.4706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77836e929 code=0x7ffc0000
[  373.642411][   T29] audit: type=1326 audit(374.032:18762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18059 comm="syz.9.4706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77836e929 code=0x7ffc0000
[  373.714689][T18076] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4712'.
[  373.769529][T18076] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4712'.
[  373.788222][T18084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  373.799774][T18084] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  373.815884][ T6783] rtc_cmos 00:00: Alarms can be up to one day in the future
[  373.823671][ T6783] rtc_cmos 00:00: Alarms can be up to one day in the future
[  373.831455][ T6783] rtc_cmos 00:00: Alarms can be up to one day in the future
[  373.840814][ T6783] rtc_cmos 00:00: Alarms can be up to one day in the future
[  373.848299][ T6783] rtc rtc0: __rtc_set_alarm: err=-22
[  373.894477][T18094] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4708'.
[  373.909684][T18089] lo speed is unknown, defaulting to 1000
[  373.916176][T18089] lo speed is unknown, defaulting to 1000
[  374.037675][T18107] rtc_cmos 00:00: Alarms can be up to one day in the future
[  374.153532][T18111] macvlan2: entered promiscuous mode
[  374.158951][T18111] bridge0: entered promiscuous mode
[  374.164886][T18111] bridge0: port 3(macvlan2) entered blocking state
[  374.171537][T18111] bridge0: port 3(macvlan2) entered disabled state
[  374.201889][T18111] macvlan2: entered allmulticast mode
[  374.207449][T18111] bridge0: entered allmulticast mode
[  374.219859][T18111] macvlan2: left allmulticast mode
[  374.225058][T18111] bridge0: left allmulticast mode
[  374.232944][T18111] bridge0: left promiscuous mode
[  374.433250][T18117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4723'.
[  374.481056][T18117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18117 comm=syz.2.4723
[  374.552231][T18120] loop2: detected capacity change from 0 to 1024
[  374.561669][T18120] EXT4-fs: test_dummy_encryption option not supported
[  374.763565][T18126] FAULT_INJECTION: forcing a failure.
[  374.763565][T18126] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  374.776804][T18126] CPU: 1 UID: 0 PID: 18126 Comm: syz.7.4725 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) 
[  374.776869][T18126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  374.776882][T18126] Call Trace:
[  374.776889][T18126]  <TASK>
[  374.776897][T18126]  __dump_stack+0x1d/0x30
[  374.776917][T18126]  dump_stack_lvl+0xe8/0x140
[  374.776942][T18126]  dump_stack+0x15/0x1b
[  374.776963][T18126]  should_fail_ex+0x265/0x280
[  374.777067][T18126]  ? __pfx_ppp_ioctl+0x10/0x10
[  374.777098][T18126]  should_fail+0xb/0x20
[  374.777140][T18126]  should_fail_usercopy+0x1a/0x20
[  374.777228][T18126]  _copy_from_user+0x1c/0xb0
[  374.777324][T18126]  memdup_user+0x5e/0xd0
[  374.777349][T18126]  ppp_get_filter+0xdb/0x160
[  374.777375][T18126]  ppp_ioctl+0xb93/0x11c0
[  374.777538][T18126]  ? __fget_files+0x184/0x1c0
[  374.777566][T18126]  ? __pfx_ppp_ioctl+0x10/0x10
[  374.777595][T18126]  __se_sys_ioctl+0xce/0x140
[  374.777633][T18126]  __x64_sys_ioctl+0x43/0x50
[  374.777661][T18126]  x64_sys_call+0x19a8/0x2fb0
[  374.777744][T18126]  do_syscall_64+0xd2/0x200
[  374.777766][T18126]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  374.777798][T18126]  ? clear_bhb_loop+0x40/0x90
[  374.777900][T18126]  ? clear_bhb_loop+0x40/0x90
[  374.777927][T18126]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.778020][T18126] RIP: 0033:0x7f75e2dee929
[  374.778035][T18126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  374.778058][T18126] RSP: 002b:00007f75e1457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  374.778079][T18126] RAX: ffffffffffffffda RBX: 00007f75e3015fa0 RCX: 00007f75e2dee929
[  374.778091][T18126] RDX: 0000200000000100 RSI: 0000000040107446 RDI: 0000000000000003
[  374.778108][T18126] RBP: 00007f75e1457090 R08: 0000000000000000 R09: 0000000000000000
[  374.778120][T18126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  374.778134][T18126] R13: 0000000000000000 R14: 00007f75e3015fa0 R15: 00007ffcc4ee8ac8
[  374.778158][T18126]  </TASK>
[  374.815594][ T6783] rtc_cmos 00:00: Alarms can be up to one day in the future
[  374.999192][ T6783] rtc_cmos 00:00: Alarms can be up to one day in the future
[  375.006876][ T6783] rtc_cmos 00:00: Alarms can be up to one day in the future
[  375.014549][ T6783] rtc_cmos 00:00: Alarms can be up to one day in the future
[  375.021909][ T6783] rtc rtc0: __rtc_set_alarm: err=-22
[  375.035120][T18130] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4728'.
[  375.156462][T18139] loop6: detected capacity change from 0 to 2048
[  375.173740][T18134] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available
[  375.182944][T18139] EXT4-fs mount: 20 callbacks suppressed
[  375.182961][T18139] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  375.223732][T18146] rtc_cmos 00:00: Alarms can be up to one day in the future
[  375.251283][T18148] loop8: detected capacity change from 0 to 512
[  375.277751][T18148] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  375.291529][T18148] EXT4-fs (loop8): orphan cleanup on readonly fs
[  375.300371][T18148] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  375.317126][T18148] EXT4-fs (loop8): Cannot turn on quotas: error -117
[  375.324456][T18148] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4734: bg 0: block 40: padding at end of block bitmap is not set
[  375.341031][T18148] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  375.350369][T18148] EXT4-fs (loop8): 1 truncate cleaned up
[  375.357916][T18148] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  375.385521][T12643] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.598085][T18157] netlink: 'syz.2.4737': attribute type 4 has an invalid length.
[  375.779263][T18153] lo speed is unknown, defaulting to 1000
[  375.797062][T18160] smc: net device bond0 applied user defined pnetid SYZ2
[  375.811645][T18153] lo speed is unknown, defaulting to 1000
[  375.818197][ T6783] rtc_cmos 00:00: Alarms can be up to one day in the future
[  375.825902][ T6783] rtc_cmos 00:00: Alarms can be up to one day in the future
[  375.833621][ T6783] rtc_cmos 00:00: Alarms can be up to one day in the future
[  375.841476][ T6783] rtc_cmos 00:00: Alarms can be up to one day in the future
[  375.848827][ T6783] rtc rtc0: __rtc_set_alarm: err=-22
[  375.864886][T18161] smc: net device bond0 erased user defined pnetid SYZ2
[  376.218919][T18177] loop8: detected capacity change from 0 to 256
[  376.243209][T18177] vfat: Unknown parameter 'shortnï€e'
[  376.306439][T18177] netlink: 68 bytes leftover after parsing attributes in process `+}[@'.
[  376.471798][T18186] loop8: detected capacity change from 0 to 512
[  376.489735][T18186] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  376.498286][T18186] EXT4-fs (loop8): orphan cleanup on readonly fs
[  376.504939][T18186] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  376.522216][T18186] EXT4-fs (loop8): Cannot turn on quotas: error -117
[  376.529471][T18186] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4745: bg 0: block 40: padding at end of block bitmap is not set
[  376.546025][T18186] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  376.555205][T18186] EXT4-fs (loop8): 1 truncate cleaned up
[  376.563028][T17060] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.573265][T18186] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  376.593769][T18190] rtc_cmos 00:00: Alarms can be up to one day in the future
[  376.603749][T18192] netlink: 'syz.6.4746': attribute type 1 has an invalid length.
[  376.622711][T18192] 8021q: adding VLAN 0 to HW filter on device bond1
[  376.630047][T12643] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.644811][T18192] loop6: detected capacity change from 0 to 512
[  376.668599][T18192] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.681382][T18192] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  376.698029][T18192] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4746'.
[  376.774996][T17060] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.799894][T18205] veth1_to_bond: entered allmulticast mode
[  376.813465][T18205] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4751'.
[  376.823359][    T9] rtc_cmos 00:00: Alarms can be up to one day in the future
[  376.831236][    T9] rtc_cmos 00:00: Alarms can be up to one day in the future
[  376.839077][    T9] rtc_cmos 00:00: Alarms can be up to one day in the future
[  376.846811][    T9] rtc_cmos 00:00: Alarms can be up to one day in the future
[  376.854115][    T9] rtc rtc0: __rtc_set_alarm: err=-22
[  376.861009][T18204] veth1_to_bond: left allmulticast mode
[  376.947136][T18210] smc: net device bond0 applied user defined pnetid SYZ2
[  376.954963][T18210] smc: net device bond0 erased user defined pnetid SYZ2
[  376.989370][T18212] rtc_cmos 00:00: Alarms can be up to one day in the future
[  377.074570][T18218] loop8: detected capacity change from 0 to 16384
[  377.123029][T18221] xt_hashlimit: max too large, truncated to 1048576
[  377.207886][T18229] loop2: detected capacity change from 0 to 512
[  377.223953][T18223] loop9: detected capacity change from 0 to 1024
[  377.247742][T18223] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  377.258786][T18223] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  377.275663][T18229] EXT4-fs: Ignoring removed mblk_io_submit option
[  377.282239][T18229] EXT4-fs: Ignoring removed bh option
[  377.304830][T18223] JBD2: no valid journal superblock found
[  377.310798][T18223] EXT4-fs (loop9): Could not load journal inode
[  377.325888][T18229] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  377.350854][T18223] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4758'.
[  377.359936][T18223] netlink: 108 bytes leftover after parsing attributes in process `syz.9.4758'.
[  377.381602][T18229] EXT4-fs (loop2): 1 truncate cleaned up
[  377.387906][T18229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  377.409338][T18223] netdevsim netdevsim9: Direct firmware load for „ failed with error -2
[  377.520552][T18240] loop9: detected capacity change from 0 to 256
[  377.537596][T18240] vfat: Unknown parameter 'shortnï€e'
[  377.577625][T18240] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22
[  377.585935][T18240] netdevsim netdevsim9: Direct firmware load for . failed with error -22
[  377.594567][T18239] loop2: detected capacity change from 512 to 511
[  377.792107][T18248] lo speed is unknown, defaulting to 1000
[  377.799345][T18248] lo speed is unknown, defaulting to 1000
[  377.815148][    T9] rtc_cmos 00:00: Alarms can be up to one day in the future
[  377.822967][    T9] rtc_cmos 00:00: Alarms can be up to one day in the future
[  377.830764][    T9] rtc_cmos 00:00: Alarms can be up to one day in the future
[  377.838504][    T9] rtc_cmos 00:00: Alarms can be up to one day in the future
[  377.845814][    T9] rtc rtc0: __rtc_set_alarm: err=-22
[  377.894233][T18255] loop7: detected capacity change from 0 to 2048
[  377.918357][T18255] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  377.944482][T18253] loop9: detected capacity change from 0 to 512
[  377.951743][T18253] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  377.962644][T18253] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 4294967295: comm syz.9.4766: invalid block
[  377.976347][T18253] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.4766: invalid indirect mapped block 4294967295 (level 1)
[  377.990861][T18253] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.4766: invalid indirect mapped block 4294967295 (level 1)
[  378.005767][T18253] EXT4-fs (loop9): 2 truncates cleaned up
[  378.011725][T18261] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.4767: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  378.029117][T18253] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  378.041778][T18261] EXT4-fs (loop7): Remounting filesystem read-only
[  378.088649][T13528] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.099421][T13762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.163005][T10731] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.279388][T18275] lo speed is unknown, defaulting to 1000
[  378.285938][T18275] lo speed is unknown, defaulting to 1000
[  378.317711][T18280] netlink: 'syz.8.4773': attribute type 5 has an invalid length.
[  378.332009][   T29] kauditd_printk_skb: 452 callbacks suppressed
[  378.332027][   T29] audit: type=1326 audit(2000000003.150:19213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18272 comm="syz.9.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77836e929 code=0x7ffc0000
[  378.362122][   T29] audit: type=1326 audit(2000000003.150:19214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18272 comm="syz.9.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77836e929 code=0x7ffc0000
[  378.393304][   T29] audit: type=1326 audit(2000000003.200:19215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18272 comm="syz.9.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb77836e929 code=0x7ffc0000
[  378.416993][   T29] audit: type=1326 audit(2000000003.200:19216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18272 comm="syz.9.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77836e929 code=0x7ffc0000
[  378.440749][   T29] audit: type=1326 audit(2000000003.200:19217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18272 comm="syz.9.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77836e929 code=0x7ffc0000
[  378.464525][   T29] audit: type=1326 audit(2000000003.210:19218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18272 comm="syz.9.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb77836e929 code=0x7ffc0000
[  378.497518][   T29] audit: type=1326 audit(2000000003.210:19219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18272 comm="syz.9.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77836e929 code=0x7ffc0000
[  378.521201][   T29] audit: type=1326 audit(2000000003.210:19220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18272 comm="syz.9.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77836e929 code=0x7ffc0000
[  378.544844][   T29] audit: type=1326 audit(2000000003.210:19221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18272 comm="syz.9.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb77836e929 code=0x7ffc0000
[  378.568457][   T29] audit: type=1326 audit(2000000003.210:19222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18272 comm="syz.9.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77836e929 code=0x7ffc0000
[  378.688633][T18278] loop7: detected capacity change from 0 to 1024
[  378.695680][T18278] EXT4-fs: Ignoring removed orlov option
[  378.701405][T18278] EXT4-fs: Ignoring removed nomblk_io_submit option
[  378.721804][T18278] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  378.774657][T10731] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.860397][T18296] __nla_validate_parse: 8 callbacks suppressed
[  378.860413][T18296] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4778'.
[  378.882306][T18296] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4778'.
[  378.994739][T18298] FAULT_INJECTION: forcing a failure.
[  378.994739][T18298] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  379.008302][T18298] CPU: 0 UID: 0 PID: 18298 Comm: syz.2.4779 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) 
[  379.008339][T18298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  379.008365][T18298] Call Trace:
[  379.008373][T18298]  <TASK>
[  379.008383][T18298]  __dump_stack+0x1d/0x30
[  379.008404][T18298]  dump_stack_lvl+0xe8/0x140
[  379.008423][T18298]  dump_stack+0x15/0x1b
[  379.008439][T18298]  should_fail_ex+0x265/0x280
[  379.008501][T18298]  should_fail_alloc_page+0xf2/0x100
[  379.008535][T18298]  __alloc_frozen_pages_noprof+0xff/0x360
[  379.008581][T18298]  alloc_pages_mpol+0xb3/0x250
[  379.008673][T18298]  vma_alloc_folio_noprof+0x1aa/0x300
[  379.008716][T18298]  do_wp_page+0x673/0x2400
[  379.008738][T18298]  ? __rcu_read_lock+0x37/0x50
[  379.008769][T18298]  handle_mm_fault+0x77d/0x2be0
[  379.008874][T18298]  ? mas_walk+0xf2/0x120
[  379.008991][T18298]  do_user_addr_fault+0x636/0x1090
[  379.009030][T18298]  ? fpregs_assert_state_consistent+0xb4/0xe0
[  379.009062][T18298]  exc_page_fault+0x62/0xa0
[  379.009097][T18298]  asm_exc_page_fault+0x26/0x30
[  379.009164][T18298] RIP: 0033:0x7f1658df0ca3
[  379.009183][T18298] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  379.009206][T18298] RSP: 002b:00007f16575964a0 EFLAGS: 00010202
[  379.009226][T18298] RAX: 0000000000000400 RBX: 00007f1657596540 RCX: 00007f164f177000
[  379.009243][T18298] RDX: 00007f16575966e0 RSI: 0000000000000009 RDI: 00007f16575965e0
[  379.009265][T18298] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000a6
[  379.009322][T18298] R10: 00000000000000bc R11: 00007f1657596540 R12: 0000000000000001
[  379.009337][T18298] R13: 00007f1658fcc120 R14: 0000000000000020 R15: 00007f16575965e0
[  379.009364][T18298]  </TASK>
[  379.009377][T18298] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  379.512499][T18298] loop2: detected capacity change from 0 to 512
[  379.521581][T18308] loop9: detected capacity change from 0 to 512
[  379.541948][T18308] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4783'.
[  379.551060][T18298] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  379.582535][T18308] loop9: detected capacity change from 0 to 512
[  379.601024][T18308] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  379.619448][T18298] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.4779: invalid block
[  379.652311][T18298] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4779: invalid indirect mapped block 4294967295 (level 1)
[  379.676621][T18308] EXT4-fs (loop9): 1 truncate cleaned up
[  379.682811][T18308] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  379.705612][T18298] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4779: invalid indirect mapped block 4294967295 (level 1)
[  379.721066][T13528] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.734586][T18312] loop6: detected capacity change from 0 to 8192
[  379.742030][T18298] EXT4-fs (loop2): 2 truncates cleaned up
[  379.758163][T18298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  379.837438][T13762] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.850054][T18312] ==================================================================
[  379.858205][T18312] BUG: KCSAN: data-race in fat12_ent_put / fat_mirror_bhs
[  379.865452][T18312] 
[  379.867806][T18312] write to 0xffff8881773f368c of 1 bytes by task 18314 on cpu 1:
[  379.875552][T18312]  fat12_ent_put+0x74/0x170
[  379.880087][T18312]  fat_free_clusters+0x2a9/0x790
[  379.885068][T18312]  vfat_mkdir+0xe9/0x1f0
[  379.889362][T18312]  vfs_mkdir+0x210/0x340
[  379.893663][T18312]  do_mkdirat+0x132/0x3f0
[  379.898041][T18312]  __x64_sys_mkdir+0x42/0x50
[  379.902689][T18312]  x64_sys_call+0x2289/0x2fb0
[  379.907400][T18312]  do_syscall_64+0xd2/0x200
[  379.911934][T18312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.917860][T18312] 
[  379.920209][T18312] read to 0xffff8881773f3600 of 512 bytes by task 18312 on cpu 0:
[  379.928045][T18312]  fat_mirror_bhs+0x1df/0x320
[  379.932767][T18312]  fat_ent_write+0xd0/0xe0
[  379.937219][T18312]  fat_chain_add+0x15b/0x3f0
[  379.941867][T18312]  fat_get_block+0x46c/0x5e0
[  379.946499][T18312]  __block_write_begin_int+0x3fd/0xf90
[  379.952035][T18312]  cont_write_begin+0x5fc/0x970
[  379.956901][T18312]  fat_write_begin+0x4f/0xe0
[  379.961516][T18312]  cont_write_begin+0x1ad/0x970
[  379.966382][T18312]  fat_write_begin+0x4f/0xe0
[  379.970995][T18312]  generic_cont_expand_simple+0xb0/0x150
[  379.976643][T18312]  fat_cont_expand+0x3e/0x170
[  379.981344][T18312]  fat_fallocate+0x177/0x1c0
[  379.985968][T18312]  vfs_fallocate+0x413/0x450
[  379.990582][T18312]  __x64_sys_fallocate+0x7a/0xd0
[  379.995555][T18312]  x64_sys_call+0x2b88/0x2fb0
[  380.000261][T18312]  do_syscall_64+0xd2/0x200
[  380.004786][T18312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.010704][T18312] 
[  380.013057][T18312] Reported by Kernel Concurrency Sanitizer on:
[  380.019278][T18312] CPU: 0 UID: 0 PID: 18312 Comm: syz.6.4784 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) 
[  380.031799][T18312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  380.041884][T18312] ==================================================================
[  380.058189][T18316] FAULT_INJECTION: forcing a failure.
[  380.058189][T18316] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  380.071330][T18316] CPU: 0 UID: 0 PID: 18316 Comm: syz.2.4786 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(voluntary) 
[  380.071358][T18316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  380.071372][T18316] Call Trace:
[  380.071381][T18316]  <TASK>
[  380.071392][T18316]  __dump_stack+0x1d/0x30
[  380.071420][T18316]  dump_stack_lvl+0xe8/0x140
[  380.071445][T18316]  dump_stack+0x15/0x1b
[  380.071524][T18316]  should_fail_ex+0x265/0x280
[  380.071566][T18316]  should_fail+0xb/0x20
[  380.071664][T18316]  should_fail_usercopy+0x1a/0x20
[  380.071726][T18316]  _copy_from_user+0x1c/0xb0
[  380.071754][T18316]  ___sys_sendmsg+0xc1/0x1d0
[  380.071875][T18316]  __x64_sys_sendmsg+0xd4/0x160
[  380.071932][T18316]  x64_sys_call+0x2999/0x2fb0
[  380.071998][T18316]  do_syscall_64+0xd2/0x200
[  380.072022][T18316]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  380.072056][T18316]  ? clear_bhb_loop+0x40/0x90
[  380.072082][T18316]  ? clear_bhb_loop+0x40/0x90
[  380.072111][T18316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.072200][T18316] RIP: 0033:0x7f1658f2e929
[  380.072219][T18316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  380.072244][T18316] RSP: 002b:00007f1657597038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  380.072262][T18316] RAX: ffffffffffffffda RBX: 00007f1659155fa0 RCX: 00007f1658f2e929
[  380.072278][T18316] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  380.072328][T18316] RBP: 00007f1657597090 R08: 0000000000000000 R09: 0000000000000000
[  380.072345][T18316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  380.072361][T18316] R13: 0000000000000000 R14: 00007f1659155fa0 R15: 00007ffe463477e8
[  380.072426][T18316]  </TASK>
[  380.307886][T18319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18319 comm=syz.9.4785
[  380.427924][T18312] FAT-fs (loop6): error, corrupted directory (invalid entries)
[  380.435847][T18312] FAT-fs (loop6): Filesystem has been set read-only
[  381.037994][T18301] loop8: detected capacity change from 0 to 512